Fortinet 400 manual HA in Transparent mode

High availability HA in Transparent mode

HTTPS To allow secure HTTPS connections to the web-based manager through this interface.

PING If you want this interface to respond to pings. Use this setting to verify your installation and for testing.

HTTP To allow HTTP connections to the web-based manager through this interface. HTTP connections are not secure and can be intercepted by a third party.

SSH To allow secure SSH connections to the CLI through this interface.

SNMP To allow a remote SNMP manager to request SNMP information by connecting to this interface.

TELNET To allow Telnet connections to the CLI through this interface. Telnet connections are not secure and can be intercepted by a third party.

5Change the HA IP address and Netmask as required.

6Optionally configure management access for other interfaces.

7Select Apply.

Now that you have configured the HA interfaces, proceed to “Configuring the HA cluster”.

Configuring the HA cluster

Use the following procedure to configure each FortiGate unit for HA before connecting the HA cluster to your network.

Note: These instructions describe configuring each of the FortiGate units in the HA cluster before connecting the HA cluster to your network. You can also use the procedure “Connecting the HA cluster to your network” on page 85 to connect the HA cluster to your network first.

1Connect to the FortiGate unit and log into the web-based manager.

2Go to System > Config > HA.

3Select HA.

You can only select HA if the 4/HA interface is configured for HA operation. See “Configuring the HA interface and HA IP address” on page 82.

4Select the HA mode.

Select Active-Passive mode to create an Active-Passive HA cluster, in which one FortiGate unit in the HA cluster is actively processing all connections and the others are passively monitoring the status and remaining synchronized with the active FortiGate unit.

Select Active-Active mode to create an Active-Active HA cluster, in which each FortiGate unit in the HA cluster is actively processing connections and monitoring the status of the other FortiGate units.

The HA mode must be the same for all FortiGate units in the HA cluster.

5Enter and confirm a password for the HA cluster.

The password must be the same for all FortiGate units in the HA cluster.

6Select a Group ID for the HA cluster.

The Group ID must be the same for all FortiGate units in the HA cluster.

FortiGate-400 Installation and Configuration Guide 83