beautypg.com

Two fortiswitch boards per chassis – Fortinet 5003 User Manual

Page 69

background image

FortiGate-5140 and 5050 base backplane communication

Base backplane HA configurations

FortiSwitch-5003A and 5003 Fabric and Base Backplane Communications Guide
01-30000-85717-20081205

69

It makes no difference which FortiSwitch-5003A base front panel interfaces you
use to link the base channels. You can connect an Ethernet cable, either straight-
through or crossover, from any base front panel interface on one
FortiSwitch-5003A board to any base front panel interface on another
FortiSwitch-5003A board installed in the other chassis. You can also use the base
front panel interfaces to connect more than two chassis together. The same
applies to the FortiSwitch-5003 ZRE0, ZRE1, or ZRE2 interfaces and to
connections between FortiSwitch-5003A and FortiSwitch-5003 boards.

Default heartbeat interfaces vary by the model of the FortiGate boards, and are
not always base backplane interfaces. For example, FortiGate-5005FA2 boards
use fabric1 and fabric2, the fabric backplane rather than the base backplane, as
the default heartbeat interfaces. To send heartbeat communications through the
base backplane, you must enable and configure the priority of base1 and base2
as heartbeat interfaces.

Figure 23: FortiGate-5140 HA cluster with two available base backplane heartbeat

interfaces (through FortiSwitch-5003A boards in hub/switch slots 1 and 2)

Two FortiSwitch boards per chassis

Installing two FortiSwitch-5003 boards provides two base backplane HA heartbeat
channels and two configuration options:

• Configure heartbeat interface failover to maintain communications through the

base backplane. For example, if you have a FortiGate-5001A cluster, you
could configure the cluster to use base1 as the primary heartbeat interface,
and base2 as a backup if base1 fails.

FA N T R AY

FA N T R AY

FA N T R AY

13

11

9

7

5

3

1

2

4

6

8

10

12

14

5140

CR

ITIC

AL

RES

ET

MA

JOR

MIN

OR

USE

R1

USE

R2

USE

R3

5140SAP

SERIAL 1

SERIAL 2

ALARM

FILTER

1 2

0

1

2

10/100

link/Act

ETH0

Service

RESET

STATUS

Hot Swap

link/Act

ETH0 ETH1

10/100

5000SM

10/100

link/Act

ETH0

Service

RESET

STATUS

Hot Swap

link/Act

ETH0 ETH1

10/100

5000SM

Base channel 1

Base channel 2