Fortinet FortiGate-800 User Manual

Page 75

High availability

Configuring an HA cluster

FortiGate-800 Installation and Configuration Guide

Select the HA mode.
Select Active-Active mode to create an Active-Active HA cluster.
Select Active-Passive mode to create an Active-Passive HA cluster.
The HA mode must be the same for all FortiGate units in the HA cluster.

Enter and confirm a password for the HA cluster.
The password must be the same for all FortiGate units in the HA cluster.

Select a Group ID for the HA cluster.
The Group ID must be the same for all FortiGate units in the HA cluster.

If you are configuring Active-Active HA, select a schedule.
The schedule controls load balancing among the FortiGate units in the active-active
HA cluster. The schedule must be the same for all FortiGate units in the HA cluster.

Select Apply.
The FortiGate unit negotiates to establish an HA cluster. When you select apply you
might temporarily loose connectivity with the FortiGate unit as the HA cluster
negotiates.

None

No load balancing. Select None when the cluster interfaces are

connected to load balancing switches.

Hub

Load balancing for hubs. Select Hub if the cluster interfaces are

connected to a hub. Traffic is distributed to units in a cluster based on

the Source IP and Destination IP of the packet.

Least Connection

Least connection load balancing. If the FortiGate units are connected

using switches, select Least connection to distribute traffic to the cluster

unit with the fewest concurrent connections.

Round Robin

Round robin load balancing. If the FortiGate units are connected using

switches, select round robin to distribute traffic to the next available

cluster unit.

Weighted Round
Robin

Weighted round robin load balancing. Similar to round robin, but

weighted values are assigned to each of the units in a cluster based on

their capacity and on how many connections they are currently

processing. For example, the primary unit should have a lower weighted

value because it handles scheduling and forwards traffic. Weighted

round robin distributes traffic more evenly because units that are not

processing traffic will be more likely to receive new connections than

units that are very busy.

Random

Random load balancing. If the FortiGate units are connected using

switches, select random to randomly distribute traffic to cluster units.

Load balancing according to IP address. If the FortiGate units are

connected using switches, select IP to distribute traffic to units in a

cluster based on the Source IP and Destination IP of the packet.

IP Port

Load balancing according to IP address and port. If the FortiGate units

are connected using switches, select IP Port to distribute traffic to units

in a cluster based on the Source IP, Source Port, Destination IP, and

Destination port of the packet.

Note: Do not configure Monitor on Interface until the FortiGate cluster is connected and
functioning. See

“Configuring cluster interface monitoring” on page 79