Fortinet FortiGate-800 manual Active-Active cluster packet flow, Active-active HA packet flow

Models: FortiGate-800

1 336
Download 336 pages 18.65 Kb
Page 89
Image 89

High availability

Active-Active cluster packet flow

 

 

Weight values are entered in order according to the priority of the units in the cluster. For example, if you have a cluster of three FortiGate units, you can enter the following command to configure the weight values for each unit:

set system ha weight 1 3 3

This command has the following results:

The first connection is processed by the primary unit

The next three connections are processed by the first subordinate unit

The next three connections are processed by the second subordinate unit

The subordinate units process more connections than the primary unit, and both subordinate units, on average, process the same number of connections.

Active-Active cluster packet flow

This section describes packet flow through an active-active HA cluster. The cluster consists of two FortiGate units (primary and subordinate). Cluster interfaces are connected using switches.

NAT/Route mode packet flow

Configuring switches to work with a NAT/Route mode cluster

Transparent mode packet flow

Figure 18: Active-active HA packet flow

Switch 1

 

Switch 2

 

HA cluster

 

Primary Unit

 

 

 

Client

Server

Subordinate Unit

FortiGate-800 Installation and Configuration Guide

89

Page 89
Image 89
Fortinet FortiGate-800 manual Active-Active cluster packet flow, Active-active HA packet flow