High availability installation

Configuring FortiGate units for HA using the web-based manager

 

 

Table 9: High availability settings (Continued)

Schedule

The schedule controls load balancing among the FortiGate units in the active-active HA cluster. The schedule must be the same for all FortiGate units in the HA cluster.

None

No load balancing. Select None when the cluster interfaces

 

are connected to load balancing switches.

 

 

Hub

Load balancing for hubs. Select Hub if the cluster interfaces

 

are connected to a hub. Traffic is distributed to units in a

 

cluster based on the Source IP and Destination IP of the

 

packet.

 

 

Least

Least connection load balancing. If the FortiGate units are

Connection

connected using switches, select Least connection to

 

distribute traffic to the cluster unit with the fewest

 

concurrent connections.

 

 

Round Robin

Round robin load balancing. If the FortiGate units are

 

connected using switches, select round robin to distribute

 

traffic to the next available cluster unit.

 

 

Weighted

Weighted round robin load balancing. Similar to round

Round Robin

robin, but weighted values are assigned to each of the units

 

in a cluster based on their capacity and on how many

 

connections they are currently processing. For example,

 

the primary unit should have a lower weighted value

 

because it handles scheduling and forwards traffic.

 

Weighted round robin distributes traffic more evenly

 

because units that are not processing traffic will be more

 

likely to receive new connections than units that are very

 

busy.

 

 

Random

Random load balancing. If the FortiGate units are

 

connected using switches, select random to randomly

 

distribute traffic to cluster units.

 

 

IP

Load balancing according to IP address. If the FortiGate

 

units are connected using switches, select IP to distribute

 

traffic to units in a cluster based on the Source IP and

 

Destination IP of the packet.

 

 

IP Port

Load balancing according to IP address and port. If the

 

FortiGate units are connected using switches, select IP Port

 

to distribute traffic to units in a cluster based on the Source

 

IP, Source Port, Destination IP, and Destination port of the

 

packet.

 

 

Configuring FortiGate units for HA using the web-based manager

Use the following procedure to configure each FortiGate unit for HA operation.

To change the FortiGate unit host name

Changing the host name is optional, but you can use host names to identify individual cluster units.

1Power on the FortiGate unit to be configured.

2Connect to the web-based manager.

See “Connecting to the web-based manager” on page 14.

3Go to System > Status.

4In the Host Name field of the Unit Information section, select Change.

5Type a new host name and select OK.

FortiGate-500A Installation Guide

01-28005-0101-20041015

47

Page 47
Image 47
Fortinet Network Router, FORTIGATE, 500A, 127 manual To change the FortiGate unit host name

500A, Network Router, 127, FORTIGATE specifications

Fortinet FortiGate 127 is an advanced network security appliance designed to deliver comprehensive protection to organizations while ensuring seamless network performance. As a part of Fortinet's leading next-generation firewall (NGFW) offerings, the FortiGate 127 integrates various essential features and technologies that are critical for modern network security.

One of the standout features of the FortiGate 127 is its ability to perform deep packet inspection. This technology enables the device to analyze and filter network traffic, identifying and mitigating threats such as malware, viruses, and intrusions in real-time. With a robust Threat Intelligence system, FortiGate utilizes FortiGuard Labs to provide continuous updates on emerging threats, equipping organizations with the necessary defense against sophisticated cyberattacks.

Another key technology included in the FortiGate 127 is integrated secure SD-WAN functionality. This feature allows organizations to optimize their wide-area network (WAN) connections, enhancing performance and reducing costs through intelligent traffic routing and real-time application visibility. By leveraging software-defined capabilities, businesses can ensure efficient use of their bandwidth, prioritize critical applications, and maintain high levels of uptime.

The FortiGate 127 also excels in providing advanced VPN support. With multiple VPN protocols such as IPsec and SSL, users can establish secure remote connections, facilitating safe access to corporate resources from anywhere. This is particularly important in today's remote work environment, where secure connectivity is essential for maintaining productivity while protecting sensitive data.

In terms of performance, the FortiGate 127 is equipped with high throughput capabilities, ensuring it can handle extensive network traffic without compromising speed or efficiency. Its multi-core architecture allows for parallel processing, which enhances overall performance and responsiveness.

Additionally, the device features an intuitive and user-friendly interface, enabling IT teams to easily manage and configure network policies. With centralized management options, administrators can efficiently oversee multiple FortiGate devices within their network, ensuring optimal visibility and control.

Overall, the Fortinet FortiGate 127 Network Router is a powerful solution for organizations seeking to bolster their security posture. With its combination of deep packet inspection, integrated SD-WAN functionality, advanced VPN support, and high-performance capabilities, it stands out as a vital asset in the modern cybersecurity landscape. It is an ideal choice for businesses aiming to protect their networks from the ever-evolving threat landscape while maintaining operational efficiency.