Wifi Router connect to Fortigate 61F (Active-passive) cluster

[pchoud]

I  have wifi network in my office , Wifi Router connected Directly to ISP Modem for internet. Now i want to connect 2 Firewall(Active-Passive) between Wifi Router & ISP Modem. how i can i connect & configure to access internet & keep my wifi network secured .

[AlexC-FTNT]

If you are asking about physical connections, take a look at this example:

https://docs.fortinet.com/document/fortigate/6.2.10/cookbook/900885/ha-active-passive-cluster-setup

You need a WAN switch in addition to the LAN switch, or use separate VLANS for the traffic, thus making the switch a single point of failure for both LAN and WAN. 

[pchoud]

1)you means  we can Use  manage switch from WAN ports of both Fortigates .  Also use same manage switch to connect WAN Port of ISP modem. Right?

2)Wifi Router WAN Port configure IP 192.168.51.1/24 connect to Port2 of Fortigate 192.168.51.2/24 . Wifi Router LAN IP =192.168.50.0/24 DHCP ON

In Policy NAT enable so wifi users can access internet.

2) We have Linksys LAN switch to connect Port 1 of both fortigate to manage redundancy. 

Port 1 IP=192.168.52.254/24 DHCP ON . Linksys Switch configure with Vlan1=192.168.52.1/24. Default route toward toward 192.168.51.254.  In Fortigate Policy from LAN to WAN , NAT Enabled.

3)Default route on Fortigate is toward WAN IP . 

Can you please help to verify that Wifi & LAN connectivity is config is good to go ?. Thanks in advance :)

[AlexC-FTNT]

1)you means  we can Use  manage switch from WAN ports of both Fortigates .  Also use same manage switch to connect WAN Port of ISP modem. Right?

>> I don't understand this question.

2) 3) - Your explanations are not clear. Try to write without google translate. You need to know how your ISP router is working. Does it do NAT or is only a modem (bridge mode)? If there is NAT performed in this router, it makes no sense to have the same subnets in both LAN and WAN. Then if the router is in bridge mode, there is no  logic to have the IP addressing on this router
Here is an image that may help you: