VDOM Failover Configuration for FortiGate Firewalls

[FortigateUser0815]

Hello Fortinet Community,

I am currently working on configuring a FortiGate firewall setup and need some confirmation with VDOM failover configuration. Here’s the scenario I am working with:

  - Firewall 1 (Fw1): VDOM A and VDOM B are configured as active.

  - Firewall 2 (Fw2): VDOM A and VDOM B are configured as passive.

  - Conversely, VDOM C is active on Fw2 and passive on Fw1.

Is it possible to set up the VDOMs in this way, with Fw1 having active VDOM A and B while Fw2 is passive, and the opposite configuration for VDOM C?

[wdeloraine_FTNT · Accepted solution]

Hi,

You can do this by using virtual cluster feature in HA.

Here's the documentation link:

https://docs.fortinet.com/document/fortigate/7.4.4/administration-guide/599385/ha-virtual-cluster-se...

[FortigateUser0815]

Thank you

[FortigateUser0815]

One last question, can VDOMs in different Vcluster communicate with each other then?

[wdeloraine_FTNT]

No you will need an external device for that.