Creating an HA1/HA2 LAG for FGSP session synchronization

The FortiGate-6000 supports creating a 20 Gbps LAG consisting of the HA1 and HA2 interfaces to improve FGSP session synchronization capacity and performance. Using a LAG for session synchronization also provides redundancy and load sharing.

Example LAG configuration:

config system interface

edit ha1-ha2

set vdom mgmt-vdom

set ip 10.1.1.1 255.255.255.0

set type aggregate

set member ha1 ha2

end

Example cluster sync configuration:

config system cluster-sync

edit 1

set peervd mgmt-vdom

set peerip 10.1.1.2

set syncvd <vdoms >

end

Example HA configuration:

config system ha

set session-pickup enable

set session-pickup-connectionless enable

set session-pickup-expectation enable

set session-pickup-nat enable

end