Happy 7 Months Anniversary!
Happy to say that Fortinet GURU turned 7 months old today! The site has come a long ways in this short amount of time. Really excited for the direction and new content that is coming down the pipe!
View ArticleSubsecond failover
Subsecond failover On FortiGate models 395xB and 3x40B HA link failover supports subsecond failover (that is a failover time of less than one second). Subsecond failover is available for interfaces...
View ArticleRemote link failover
Remote link failover Remote link failover (also called remote IP monitoring) is similar to HA port monitoring and link health monitoring (also known as dead gateway detection). Port monitoring causes a...
View ArticleAdding HA remote IP monitoring to multiple interfaces
Adding HA remote IP monitoring to multiple interfaces You can enable HA remote IP monitoring on multiple interfaces by adding more interface names to the pingserver-monitor-interface keyword. If your...
View ArticleChanging the link monitor failover threshold
Changing the link monitor failover threshold If you have multiple link monitors you may want a failover to occur only if more than one of them fails. For example, you may have 3 link monitors...
View ArticleMonitoring multiple IP addresses from one interface
Monitoring multiple IP addresses from one interface You can add multiple IP addresses to a single link monitor to use HA remote IP monitoring to monitor more than one IP address from a single...
View ArticleFlip timeout
Flip timeout The HA remote IP monitoring configuration also involves setting a flip timeout. The flip timeout is required to reduce the frequency of failovers if, after a failover, HA remote IP...
View ArticleDetecting HA remote IP monitoring failovers
Detecting HA remote IP monitoring failovers Just as with any HA failover, you can detect HA remote IP monitoring failovers by using SNMP to monitor for HA traps. You can also use alert email to receive...
View ArticleSession failover (session pick-up)
Session failover (session pick-up) Session failover means that a cluster maintains active network TCP and IPsec VPN sessions (including NAT sessions) after a device or link failover. You can also...
View ArticleWAN optimization and HA
WAN optimization and HA You can configure WAN optimization on a FortiGate HA cluster. The recommended HA configuration for WAN optimization is active-passive mode. Also, when the cluster is operating,...
View ArticleTransparent mode active-passive cluster packet flow
Transparent mode active-passive cluster packet flow This section describes how packets are processed and how failover occurs in an active-passive HA cluster running in Transparent mode. The cluster is...
View ArticleFailover performance
Failover performance This section describes the designed device and link failover times for a FortiGate cluster and also shows results of a failover performance test. Device failover performance By...
View ArticleHA and load balancing
HA and load balancing FGCP active-active (a-a) load balancing distributes network traffic among all of the units in a cluster. Load balancing can improve cluster performance because the processing load...
View ArticleLoad balancing TCP and UDP sessions
Load balancing TCP and UDP sessions You can use the following command to configure the cluster to load balance TCP sessions in addition to security profile sessions. config system ha set...
View ArticleDynamically optimizing weighted load balancing according to how busy cluster...
Dynamically optimizing weighted load balancing according to how busy cluster units are In conjunction with using static weights to load balance sessions among cluster units you can configure a cluster...
View ArticleNAT/Route mode active-active cluster packet flow
NAT/Route mode active-active cluster packet flow This section describes an example of how packets are load balanced and how failover occurs in an active-active HA cluster running in NAT/Route mode. In...
View ArticleTransparent mode active-active cluster packet flow
Transparent mode active-active cluster packet flow This section describes an example of how packets are load balanced and how failover occurs in an active-active HA cluster running in Transparent mode....
View ArticleHA with FortiGate-VM and third-party products
HA with FortiGate-VM and third-party products This chapter provides information about operating FortiOS VM cluster and operating FortiGate clusters with third party products such as layer-2 and layer-3...
View ArticleFortiGate VM for Hyper-V HA configuration
FortiGate VM for Hyper-V HA configuration Promiscuous mode and support for MAC address spoofing is required for FortiGate-VM for Hyper-V to support FortiGate Clustering Protocol (FGCP) high...
View ArticleHow To – Basic OSPF Configuration On FortiGates Running 5.4.1
I had some people ask me how to configure some basic OSPF on a FortiGate so I created the following how to video. Yes, I know I need to get better at explaining things in videos. I get shy though…oh...
View Article