Main DC and DR connection failover

[MustphaBassim]

Hello Dears

I asking about we have DC with public IP address and DR with different Public IP address we are planning to make them active/standby when the main DC down the DR coming up take in mind both sides have Fortigate firewall any advise ?

Bests

[saneeshpv_FTNT]

Hi @MustphaBassim ,

If you have different IP ranges in DC and DR, you need to deploy solutions like FortiADC which could perform DNS based global Load Balancing. 

https://docs.fortinet.com/document/fortiadc/7.4.0/handbook/741804/global-load-balancing-basics

With Global Load Balancing feature in FortiADC, you can always give preference to DC and in case DC fails traffic could switch to DR. FortiGate by itself will not have much role in this election process but being it a perimeter firewall could perform address translation from Public to Private (DC or DR) and vice versa and protect your DC and DR network respectively from security threats.

If you have anything specific to discuss about this please let me know. 

Best Regards,

[MustphaBassim]

Hello Dear

thnx for your replay so there is no other solution in our current status

Bests

[ndumaj]

HI MustphaBassim,

What is the service used on FGT related to DC?
Please review the admin guide for DNS:
https://docs.fortinet.com/document/fortigate/7.4.1/administration-guide/752486/dns-domain-list
https://docs.fortinet.com/document/fortigate/7.4.1/administration-guide/780581/dns
BR