High availability installation | Fortinet 60c specification

FortiGate-60 Installation Guide Version 2.80 MR8

High availability installation

This chapter describes how to install two or more FortiGate units in an HA cluster. HA installation involves three basic steps:

•Configuring FortiGate units for HA operation

•Connecting the cluster to your networks

•Installing and configuring the cluster

For information about HA, see the FortiGate Administration Guide and the FortiOS

High Availability technical note.

Priorities of heartbeat device and monitor priorities

The procedures in this chapter do not include steps for changing the priorities of heartbeat devices or for configuring monitor priorities settings. Both of these HA settings should be configured after the cluster is up and running.

Configuring FortiGate units for HA operation

A FortiGate HA cluster consists of two or more FortiGate units with the same HA configuration. This section describes how to configure each of the FortiGate units to be added to a cluster for HA operation. The procedures are the same for active-active and active-passive HA.

•High availability configuration settings

•Configuring FortiGate units for HA using the web-based manager

•Configuring FortiGate units for HA using the CLI

High availability configuration settings

Use the following table to select the HA configuration settings for the FortiGate units in the HA cluster.

FortiGate-60 Installation Guide

01-28008-0018-20050128

47

Image 47

Fortinet 60c manual High availability installation, Configuring FortiGate units for HA operation

Contents

January 01-28008-0018-20050128 Installation Guide Regulatory Compliance Trademarks Table of Contents Index Introduction Secure installation, configuration, and management Web-based manager Command line interface Document conventions Setup wizard FortiGate documentation FortiGate Installation Guide FortiManager documentation Related documentationFortinet Knowledge Center Comments on Fortinet technical documentation FortiLog documentation Customer service and technical supportFortiMail documentation Customer service and technical support Customer service and technical support Getting started Mounting Package contents To power on the FortiGate unit Turning the FortiGate unit power on and offPower requirements Environmental specifications To connect to the web-based manager Connecting to the web-based manager Stop bits Flow control Connecting to the command line interface CLITo connect to the CLI Bits per second 9600 Data bits Parity Go to System Network DNS Quick installation using factory defaults Factory default Dhcp server configuration Factory default FortiGate configuration settings Factory default NAT/Route mode network configuration Management IP Factory default Transparent mode network configurationFactory default firewall configuration Administrative access Scan Factory default protection profilesStrict NAT/Route mode Planning the FortiGate configuration Example NAT/Route mode network configuration NAT/Route mode with multiple external network connections Example NAT/Route multiple internet connection configuration Transparent mode Next steps Configuration optionsWeb-based manager and setup wizard Preparing to configure the FortiGate unit in NAT/Route mode NAT/Route mode installation PPPoE settings User name Password Using the web-based managerDhcp or PPPoE configuration To add a default route Configuring basic settingsTo configure interfaces Go to System Network Interface To configure DNS server settings Go to System Network DNS To configure interfaces Using the command line interfaceConfiguring the FortiGate unit to operate in NAT/Route mode To add/change the administrator password Get system interface Example To configure DNS server settings Using the setup wizard Internal servers Setup wizard settings PasswordExternal Interface Dhcp server Setup wizard settings Antivirus Connecting the FortiGate unit to the networksStarting the setup wizard FortiGate-60 FortiGate-60 NAT/Route mode connections Configuring the Modem interface Configuring the networks To register the FortiGate unit Go to System Config TimeTo configure virus, attack, and spam definition updates To set the date and time Go to System Maintenance Update Center Preparing to configure Transparent mode Transparent mode installation Management IP To change the Management IP Go to System Network Management To change to Transparent mode using the CLI Reconnecting to the web-based manager To configure the default gateway To configure the management IP address To start the setup wizard Internal Connecting the FortiGate unit to your network To register your FortiGate unit Go to System Maintenance Update Center Priorities of heartbeat device and monitor priorities High availability installationConfiguring FortiGate units for HA operation High availability configuration settings Group ID MAC Address To change the FortiGate unit host name Config system global Set hostname namestr end Configuring FortiGate units for HA using the CLI To configure the FortiGate unit for HA operation Connecting the cluster to your networks To connect the cluster HA network configuration Installing and configuring the cluster Installing and configuring the cluster Redundant mode configuration Configuring the modem interfaceSelecting a modem mode To operate in standalone mode Go to System Network Modem Standalone mode configuration Redundant for Configuring modem settingsMode Auto-dial To connect to a dialup account Go to System Network Modem Connecting and disconnecting the modem in Standalone modeTo configure modem settings Go to System Network Modem ISP Defining a Ping ServerDead gateway detection To disconnect the modem Adding firewall policies for modem connections CLI Index Index