Fortinet 500A, 127 High availability installation, Configuring FortiGate units for HA operation

Page 45

FortiGate-500A Installation Guide Version 2.80 MR5

High availability installation

This chapter describes how to install two or more FortiGate units in an HA cluster. HA installation involves three basic steps:

Configuring FortiGate units for HA operation

Connecting the cluster to your networks

Installing and configuring the cluster

For information about HA, see the FortiGate Administration Guide and the FortiOS

High Availability technical note.

Priorities of heartbeat device and monitor priorities

The procedures in this chapter do not include steps for changing the priorities of heartbeat devices or for configuring monitor priorities settings. Both of these HA settings should be configured after the cluster is up and running.

Configuring FortiGate units for HA operation

A FortiGate HA cluster consists of two or more FortiGate units with the same HA configuration. This section describes how to configure each of the FortiGate units to be added to a cluster for HA operation. The procedures are the same for active-active and active-passive HA.

High availability configuration settings

Configuring FortiGate units for HA using the web-based manager

Configuring FortiGate units for HA using the CLI

High availability configuration settings

Use the following table to select the HA configuration settings for the FortiGate units in the HA cluster.

FortiGate-500A Installation Guide

01-28005-0101-20041015

45

Image 45
Contents October 01-28005-0101-20041015 Installation GuideRegulatory Compliance TrademarksTable of Contents Index Reliability demanded by large enterprises IntroductionWeb-based manager Secure installation, configuration, and managementCommand line interface Setup wizardDocument conventions Set allowaccess ping https ssh snmp http telnet Comments on Fortinet technical documentation Fortinet documentationCustomer service and technical support Getting started Mounting Package contentsPower requirements Turning the FortiGate unit power on and offEnvironmental specifications Air flowConnecting to the web-based manager To power off the FortiGate unitTo connect to the web-based manager To connect to the CLI Connecting to the command line interface CLIFactory default FortiGate configuration settings Bits per second 9600 Data bits ParityStop bits Flow control Network Settings Factory default NAT/Route mode network configurationAccount PortFactory default firewall configuration Factory default Transparent mode network configurationStrict Factory default protection profilesScan WebNAT/Route mode Planning the FortiGate configurationExample NAT/Route mode network configuration NAT/Route mode with multiple external network connectionsTransparent mode Configuration optionsFortiGate-500A Unit Management IP in Transparent mode Next steps Web-based manager and setup wizardConfiguration options Getting started 01-28005-0101-20041015 Preparing to configure the FortiGate unit in NAT/Route mode NAT/Route mode installationPPPoE settings User name Password Dhcp or PPPoE configurationConfiguring basic settings Using the web-based managerTo configure interfaces Go to System Network Interface To configure DNS server settings Go to System Network DNSTo add a default route Using the front control buttons and LCDGo to System Router Static To change the IP address and netmask of an interfaceConfiguring the FortiGate unit to operate in NAT/Route mode Using the command line interfaceTo add a default gateway to an interface To add/change the administrator passwordExample To configure DNS server settings Using the setup wizard Setup wizard settings Antivirus Starting the setup wizardConnecting the FortiGate unit to the networks To connect the FortiGate unit running in NAT/Route modePort 1 Port Configuring the networks Go to System Config TimeTo set the date and time To configure virus, attack, and spam definition updates Go to System Maintenance Update CenterTo register the FortiGate unit Preparing to configure Transparent mode Transparent mode installationTransparent mode settings Administrator Password DNS SettingsTo change the Management IP Go to System Network Management Reconnecting to the web-based manager To add a default gatewayTo change the management IP address and netmask To configure the management IP address To change to Transparent mode using the CLIExample To configure the default gatewayTo start the setup wizard Connecting the FortiGate unit to your networkPort FortiGate-500ATo register your FortiGate unit Configuring FortiGate units for HA operation High availability installationHigh availability configuration settings Priorities of heartbeat device and monitor prioritiesGroup ID MAC Address To change the FortiGate unit host name Config system global Set hostname namestr end Configuring FortiGate units for HA using the CLITo configure the FortiGate unit for HA operation Connecting the cluster to your networksTo connect the cluster HA network configurationInstalling and configuring the cluster Configuring FortiGate units for HA using the CLI CLI IndexIndex 01-28005-0101-20041015

500A, Network Router, 127, FORTIGATE specifications

Fortinet FortiGate 127 is an advanced network security appliance designed to deliver comprehensive protection to organizations while ensuring seamless network performance. As a part of Fortinet's leading next-generation firewall (NGFW) offerings, the FortiGate 127 integrates various essential features and technologies that are critical for modern network security.

One of the standout features of the FortiGate 127 is its ability to perform deep packet inspection. This technology enables the device to analyze and filter network traffic, identifying and mitigating threats such as malware, viruses, and intrusions in real-time. With a robust Threat Intelligence system, FortiGate utilizes FortiGuard Labs to provide continuous updates on emerging threats, equipping organizations with the necessary defense against sophisticated cyberattacks.

Another key technology included in the FortiGate 127 is integrated secure SD-WAN functionality. This feature allows organizations to optimize their wide-area network (WAN) connections, enhancing performance and reducing costs through intelligent traffic routing and real-time application visibility. By leveraging software-defined capabilities, businesses can ensure efficient use of their bandwidth, prioritize critical applications, and maintain high levels of uptime.

The FortiGate 127 also excels in providing advanced VPN support. With multiple VPN protocols such as IPsec and SSL, users can establish secure remote connections, facilitating safe access to corporate resources from anywhere. This is particularly important in today's remote work environment, where secure connectivity is essential for maintaining productivity while protecting sensitive data.

In terms of performance, the FortiGate 127 is equipped with high throughput capabilities, ensuring it can handle extensive network traffic without compromising speed or efficiency. Its multi-core architecture allows for parallel processing, which enhances overall performance and responsiveness.

Additionally, the device features an intuitive and user-friendly interface, enabling IT teams to easily manage and configure network policies. With centralized management options, administrators can efficiently oversee multiple FortiGate devices within their network, ensuring optimal visibility and control.

Overall, the Fortinet FortiGate 127 Network Router is a powerful solution for organizations seeking to bolster their security posture. With its combination of deep packet inspection, integrated SD-WAN functionality, advanced VPN support, and high-performance capabilities, it stands out as a vital asset in the modern cybersecurity landscape. It is an ideal choice for businesses aiming to protect their networks from the ever-evolving threat landscape while maintaining operational efficiency.