Hello,
I am currently using 2 "data" port for Hearbeat / session sync (different vlan, let's say vlan 10 for port1 and vlan 20 for port 2). I am planning add two new one to split the purpose. (port 3-4)
From what I understood the double HA heartbeat should not cause any issue even if both are in the same vlan because if we setup each interface wit different priority, only 1 will be used unless it goes down. (please do not hesitate to correct me if wrong).
What about the session sync ?
Currently :
Port 1 - vlan 10
Port 2 - vlan20
Port 3 and port 4 (session sync dedicated) must they be in the same vlan ? I was initially thinking of simply updating this way instead as there is no concept of priority for session sync... :
port 1 and 2 - vlan 10
port 3 and 4 - vlan 20
I know this is not not advised to use the "data" port instead of HA dedicated interface for Heartbeat interface, but the reason of not doing this is because there no longer any fiber port available on switch side for those interface ....
Thanks in advance for your help.
Furil
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Hello Furil, Good day!
Port 3 and port 4 (session sync dedicated) must they be in the same vlan ?
I don't think they should be in same vlan.
I referred this article: https://community.fortinet.com/t5/FortiGate/Technical-Tip-HA-session-sync-dev-configuration/ta-p/196...
Here I read that: Selecting more than one interface, session synchronization traffic is load balanced among the selected interfaces.
This means there is no way to prioritize the interface like you can do with Heartbeat interfaces.
If you have two session-sync interfaces in same vlan, one interface would be receiving the traffic from other interface on same device because of broadcast nature of traffic inside the vlan (Session synchronization packets use Ethertype 0x8892) which may cause many more problems.
Please let us know if you have more doubt on this.
Thank you!
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1688 | |
1087 | |
752 | |
446 | |
227 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.