Configuring FortiGate units for HA using the CLI

High availability installation

 

 

To configure a FortiGate unit for HA operation

1Go to System > Config > HA.

2Select High Availability.

3Select the mode.

4Select a Group ID for the HA cluster.

5If required, change the Unit Priority.

6If required, select Override master.

7Enter and confirm a password for the HA cluster.

8If you are configuring Active-Active HA, select a schedule.

9Select Apply.

The FortiGate unit negotiates to establish an HA cluster. When you select apply you may temporarily lose connectivity with the FortiGate unit as the negotiation takes place.

10If you are configuring a NAT/Route mode cluster, power off the FortiGate unit and then repeat this procedure for all the FortiGate units in the cluster. Once all of the units are configured, continue with “Connecting the cluster to your networks” on page 49.

11If you are configuring a Transparent mode cluster, reconnect to the web-based manager.

You may have to wait a few minutes before you can reconnect.

12Go to System > Status.

13Select Change to Transparent Mode and select OK to switch the FortiGate unit to Transparent mode.

14Allow the FortiGate unit to restart in Transparent mode and then power off the FortiGate unit.

15Repeat this procedure for all of the FortiGate units in the cluster.

16Once all units are configured, continue with “Connecting the cluster to your networks” on page 49.

Configuring FortiGate units for HA using the CLI

Use the following procedure to configure each FortiGate unit for HA operation.

To change the FortiGate unit host name

1Power on the FortiGate unit to be configured.

2Connect to the CLI.

See “Connecting to the command line interface (CLI)” on page 15.

3Change the host name.

config system global

set hostname <name_str> end

48

01-28005-0101-20041015

Fortinet Inc.

Page 48
Image 48
Fortinet FORTIGATE, 500A Configuring FortiGate units for HA using the CLI, Config system global Set hostname namestr end

500A, Network Router, 127, FORTIGATE specifications

Fortinet FortiGate 127 is an advanced network security appliance designed to deliver comprehensive protection to organizations while ensuring seamless network performance. As a part of Fortinet's leading next-generation firewall (NGFW) offerings, the FortiGate 127 integrates various essential features and technologies that are critical for modern network security.

One of the standout features of the FortiGate 127 is its ability to perform deep packet inspection. This technology enables the device to analyze and filter network traffic, identifying and mitigating threats such as malware, viruses, and intrusions in real-time. With a robust Threat Intelligence system, FortiGate utilizes FortiGuard Labs to provide continuous updates on emerging threats, equipping organizations with the necessary defense against sophisticated cyberattacks.

Another key technology included in the FortiGate 127 is integrated secure SD-WAN functionality. This feature allows organizations to optimize their wide-area network (WAN) connections, enhancing performance and reducing costs through intelligent traffic routing and real-time application visibility. By leveraging software-defined capabilities, businesses can ensure efficient use of their bandwidth, prioritize critical applications, and maintain high levels of uptime.

The FortiGate 127 also excels in providing advanced VPN support. With multiple VPN protocols such as IPsec and SSL, users can establish secure remote connections, facilitating safe access to corporate resources from anywhere. This is particularly important in today's remote work environment, where secure connectivity is essential for maintaining productivity while protecting sensitive data.

In terms of performance, the FortiGate 127 is equipped with high throughput capabilities, ensuring it can handle extensive network traffic without compromising speed or efficiency. Its multi-core architecture allows for parallel processing, which enhances overall performance and responsiveness.

Additionally, the device features an intuitive and user-friendly interface, enabling IT teams to easily manage and configure network policies. With centralized management options, administrators can efficiently oversee multiple FortiGate devices within their network, ensuring optimal visibility and control.

Overall, the Fortinet FortiGate 127 Network Router is a powerful solution for organizations seeking to bolster their security posture. With its combination of deep packet inspection, integrated SD-WAN functionality, advanced VPN support, and high-performance capabilities, it stands out as a vital asset in the modern cybersecurity landscape. It is an ideal choice for businesses aiming to protect their networks from the ever-evolving threat landscape while maintaining operational efficiency.