Fortinet FortiGate FortiGate-1000

System config HA
FortiGate-1000 Administration Guide 01-28006-0009-20041105 93
Inserting an HA cluster into your network temporarily interrupts communications on
the network because new physical connections are being made to route traffic through
the cluster. Also, starting the cluster interrupts network traffic until the individual
FortiGate units in the cluster are functioning and the cluster completes negotiation.
Cluster negotiation normally takes just a few seconds. During system startup and
negotiation all network traffic is dropped.
1 Connect the cluster units.
• Connect the internal interfaces of each FortiGate unit to a switch or hub connected
to your internal network.
• Connect the external interfaces of each FortiGate unit to a switch or hub connected
to your external network.
• Optionally connect ports 1, 2, and 3 of each FortiGate unit to switches or hubs
connected to other networks.
• Connect the 4/HA interfaces of the FortiGate units to another switch or hub.
Figure 31: HA network configuration
2 Power on all the FortiGate units in the cluster.
As the units start, they negotiate to choose the primary cluster unit and the
subordinate units. This negotiation occurs with no user intervention and normally just
takes a few seconds.
You can now configure the cluster as if it is a single FortiGate unit.
Esc
Enter
INTERNAL
EXTERNAL
1 2 3 4 / HA
Esc
Enter
INTERNAL
EXTERNAL
1 2 3 4 / HA
Internet
Router
HA
HA
Hub or
Switch
External
Internal Network
Internal
Hub or
Switch
External
Internal