Planning the network topology
How to set up your FortiWAN
FortiWAN, they are just not at the fixed positions. The port mapping will be reflected in related configurations.
FortiWAN supports IEEE 802.1Q (also known as VLAN Tagging), but it does not support Cisco’s ISL. Every physical
port (except the HA port) can be divided into several VLAN with a VLAN switch, and those virtual ports can be mapped
to WAN port, LAN port or DMZ port as well.
See also
Configurations for VLAN and Port Mapping
IPv6/IPv4 Dual Stack
FortiWAN supports deployment of IPv6/IPv4 Dual Stack in [
], [
], [
] and [
]. For configuration of IPv6/IPv4 Dual Stack, please select
appropriate WAN Type (See "
WAN types: Routing mode and Bridge mode
") for the WAN link according to the IPv4
you are provided by ISP as mentioned previously, and configure for IPv4 and IPv6 at the WAN link together. Except a
WAN IPv6 subnet used to deploy for a WAN link, ISP might provide an extra LAN IPv6 subnet for deploying your LAN.
Depending on the demand, the LAN IPv6 subnet can be deployed as basic subnet in DMZ as well for the WAN link.
FortiWAN in HA (High Availability) Mode
Installing FortiWAN in HA mode
When two FortiWAN units work together, they can be configured to HA (High Availability) double-device backup mode.
This setup allows two FortiWAN units to server as backup for each other. The master is the main functioning unit,
while the slave is the backup unit in standby. An FortiWAN unit alone already has built-in fault tolerance mechanism.
All its OS and control applications are stored in Flash Memory, so sudden loss of electricity will not damage the
system. But when the network must provide non-stop service for mission-critical applications, the HA mode becomes a
must. With HA, FortiWAN serves a significant solution to accomplish network fault tolerance.
FortiWAN supports hot backup in HA by heartbeat mechanism. When both FortiWAN are on, one unit (the master)
performs operations, with the other (the slave) in standby. If the master fails for power failure or hardware failure
(including normal power off and system reboot), hot backup performs a switch-over to the slave (heartbeat detection
fails). This function logically promotes the slave to activate HA and to resume the role of the master. The failed master
unit will take the role of slave after it resumes from reboot. The HA hot-backup solution significantly limits the
downtime, and secures uninterrupted operation for critical applications.
Hot backup also implies data synchronization. FortiWAN HA performs system configurations synchronization between
the master and slave units. Applying configurations to the master unit from Web UI triggers a synchronization to the
slave unit. Besides, as long as the peer unit resumes as slave mode from system rebooting, the master also
synchronizes system configures with it. This mechanism guarantees the identical system configurations for the two
units.
In case that two units are inconsistent with firmware version, FortiWAN model and throughput license, only one unit
takes the role of master while the peer unit stay the booting status. A master unit cannot synchronize system
configurations with the unit that is in booting status. A message "Incompatible" is displayed for Peer Information in the
Summary page of the master's Web UI.
FortiWAN Handbook
Fortinet Technologies Inc.
27
Содержание FortiWAN
Страница 1: ...FortiWAN Handbook VERSION 4 2 1...
