Fortinet Document Library

Version:

Version:

Version:

Version:

Version:

Version:

Version:


Table of Contents

FortiGate-6000 Handbook

FortiGate-6000 support for VRRP

The FortiGate-6000 platform supports the Virtual Router Redundancy Protocol (VRRP), allowing you to configure VRRP HA between FortiGate-6000 devices. You can also add a FortiGate-6000 to a VRRP domain with other VRRP routers.

To set up a FortiGate-6000 VRRP to provide HA for internet connectivity:

  1. Add a virtual VRRP router to the internal interface to the FortiGate-6000(s) and routers to be in the VRRP domain.
  2. Set the VRRP IP address of the domain to the internal network default gateway IP address.
  3. Give one of the VRRP domain members the highest priority so it becomes the primary (or master) router and give the others lower priorities so they become backup routers.

During normal operation, the primary VRRP router sends outgoing VRRP routing advertisements. Both the primary and backup VRRP routers listen for incoming VRRP advertisements from other routers in the VRRP domain. If the primary router fails, the new primary router takes over the role of the default gateway for the internal network and starts sending and receiving VRRP advertisements.

FortiGate-6000 support for VRRP

The FortiGate-6000 platform supports the Virtual Router Redundancy Protocol (VRRP), allowing you to configure VRRP HA between FortiGate-6000 devices. You can also add a FortiGate-6000 to a VRRP domain with other VRRP routers.

To set up a FortiGate-6000 VRRP to provide HA for internet connectivity:

  1. Add a virtual VRRP router to the internal interface to the FortiGate-6000(s) and routers to be in the VRRP domain.
  2. Set the VRRP IP address of the domain to the internal network default gateway IP address.
  3. Give one of the VRRP domain members the highest priority so it becomes the primary (or master) router and give the others lower priorities so they become backup routers.

During normal operation, the primary VRRP router sends outgoing VRRP routing advertisements. Both the primary and backup VRRP routers listen for incoming VRRP advertisements from other routers in the VRRP domain. If the primary router fails, the new primary router takes over the role of the default gateway for the internal network and starts sending and receiving VRRP advertisements.