Fortinet FortiGate FortiGate-100A, Administration Manual

Page: 88 / 388

88
01-28006-0068-20041105 Fortinet Inc.
HA configuration System config
Password
Enter a password for the HA cluster. The password must be the same for all FortiGate
units in the HA cluster. The maximum password length is 15 characters.
If you have more than one FortiGate HA cluster on the same network, each cluster
should have a different password.
Schedule
If you are configuring an active-active cluster, select a load balancing schedule.
Priorities of Heartbeat Device
Enable or disable HA heartbeat communication and set the heartbeat priority for each
interface in the cluster.
By default HA heartbeat communication is set for two interfaces. You can disable HA
heartbeat communication for either of these interfaces or enable HA heartbeat for
other interfaces. In most cases you can maintain the default heartbeat device
configuration as long as you can connect the heartbeat device interfaces together.
To enable HA heartbeat communication for an interface, enter a priority for the
interface. To disable HA heartbeat communication for an interface, delete the priority
for the interface.
The HA heartbeat priority range is 0 to 512. The interface with the highest priority
handles all HA heartbeat traffic. If this interface fails or becomes disconnected, the
interface with the next highest priority handles all HA heartbeat traffic.
None No load balancing. Select None when the cluster interfaces are connected
to load balancing switches.
Hub Load balancing if the cluster interfaces are connected to a hub. Traffic is
distributed to cluster units based on the Source IP and Destination IP of the
packet.
Least-
Connection Least connection load balancing. If the cluster units are connected using
switches, select Least Connection to distribute network traffic to the cluster
unit currently processing the fewest connections.
Round-Robin Round robin load balancing. If the cluster units are connected using
switches, select Round-Robin to distribute network traffic to the next
available cluster unit.
Weighted
Round-Robin Weighted round robin load balancing. Similar to round robin, but weighted
values are assigned to each of the units in a cluster based on their capacity
and on how many connections they are currently processing. For example,
the primary unit should have a lower weighted value because it handles
scheduling and forwards traffic. Weighted round robin distributes traffic more
evenly because units that are not processing traffic will be more likely to
receive new connections than units that are very busy.
Random Random load balancing. If the cluster units are connected using switches,
select Random to randomly distribute traffic to cluster units.
IP Load balancing according to IP address. If the cluster units are connected
using switches, select IP to distribute traffic to units in a cluster based on the
Source IP and Destination IP of the packet.
IP Port Load balancing according to IP address and port. If the cluster units are
connected using switches, select IP Port to distribute traffic to units in a
cluster based on the source IP, source port, destination IP, and destination
port of the packet.