HA (High Availability)

[Fabio74]

Good morning everyone. Attached is the current scene. We have now acquired a second Fortigate 100F. The idea is to configure the two in active-passive HA (High Availability). I have some doubts. 1) Can the WAN be the same? 2) How do I connect and where do I connect the three doors of the second Fortigate? 3) The 3 ports of the first Fortigate are configured as DHCP Servers, will they continue to work?

[srajeswaran · Accepted solution]

This is the ideal method and all the functionalities will continue to work as in the current setup.

[srajeswaran · Accepted solution]

Yeah, the same ports from both units need to connect to the same LAN subnets. The LAN segments in diagram shows switches, is that so? If so, you just need to add one port to the connection towards the new FGT unit.

[srajeswaran · Accepted solution]

This is the ideal method and all the functionalities will continue to work as in the current setup.

[Fabio74]

Woww... Great, thanks for the quick reply srajeswaran. Two more little doubts. 1) I don't have a Layer 2 switch, can it still work? 2) I connect ports H1 and H2 equally to each other, right?

[srajeswaran · Accepted solution]

Yeah, the same ports from both units need to connect to the same LAN subnets. The LAN segments in diagram shows switches, is that so? If so, you just need to add one port to the connection towards the new FGT unit.

[Fabio74]

OK perfect. Sorry but the translator often doesn't work effectively. So I can use a regular 1GB Switch. I entered the new design. Last thing, the 3 LAN ports are currently configured in VLAN Switch. Is that okay?

[srajeswaran]

yes, this looks fine. Yes, the VLANs can be configured on the VLAN switch, just need to make sure the FGT ports (from both nodes) are mapped to the corresponding LAN ports.

[Fabio74]

I was wrong, actually the scheme should be this, precisely because I don't have a layer2 switch

[srajeswaran · Accepted solution]

Hi Fabio,

Yes, this is correct and expected to work.

[Fabio74]

Let's hope so. It's the first time I try something more advanced. Also because I made the company spend a lot of money :) Thank you very much for the technical and moral support :)

[srajeswaran]

You are welcome. Feel free to post more if you face any issues while implementing. We are here to help.