Fortinet FortiGate FortiGate-100A, Administration Manual

Page: 86 / 388

86
01-28006-0068-20041105 Fortinet Inc.
HA configuration System config
High Availability
Select High Availability to operate the FortiGate unit in HA mode. After selecting High
Availability, complete the remainder of the HA configuration.
Cluster Members
When the cluster is operating, you can select Cluster Members to view the status of all
FortiGate units in the cluster. Status information includes the cluster ID, status, up
time, weight, and monitor information. For more information, see
“To view the status of
each cluster member” on page 95 .
Mode
All members of the HA cluster must be set to the same HA mode.
Group ID
The group ID range is from 0 to 63. All members of the HA cluster must have the
same group ID.
When the FortiGate units in the cluster are switched to HA mode, all of the interfaces
of all of the units in the cluster acquire the same virtual MAC address. This virtual
MAC address is set according to the group ID.
Table 3 lists the virtual MAC address
set for each group ID.
If you have more than one HA cluster on the same network, each cluster should have
a different group ID. If two clusters on the same network have the same group ID, the
duplicate MAC addresses cause addressing conflicts on the network.
Active-Active Load balancing and failover HA. Each cluster unit actively processes
connections and monitors the status of the other FortiGate units in the cluster.
The primary FortiGate unit in the cluster controls load balancing among all of
the cluster units.
Active-Passive Failover HA. The primary FortiGate unit in the cluster processes all
connections. All other FortiGate units in the cluster passively monitor the
cluster status and remain synchronized with the primary FortiGate unit.
Table 3: HA group ID and MAC address
Group ID MAC Address
0
00-09-0f-06-ff-00
1
00-09-0f-06-ff-01
2
00-09-0f-06-ff-02
3
00-09-0f-06-ff-03
…
...
63
00-09-0f-06-ff-3f