FortiGate-7000F FGSP
FortiGate-7000F supports the FortiGate Session Life Support Protocol (FGSP) (also called standalone session sync) to synchronize sessions among up to four FortiGate-7000Fs
For details about FGSP, see: FGSP.
You have the following options for selecting interfaces to use for FGSP session synchronization:
-
Up to eight physical data interfaces.
-
One or more data interface LAGs.
-
VLANs added to the data interfaces or data interface LAGs.
-
The M1 to M4 interfaces of either FIM.
-
A LAG consisting of the M1 to M4 interfaces of one or both FIMs.
You can use configuration synchronization to synchronize the configurations of the FortiGate-7000Fs in the FGSP deployment (see Standalone configuration synchronization). You can use the M1 to M4 interfaces for configuration synchronization. You can also configure the FortiGate-7000Fs separately or use FortiManager to keep key parts of the configuration, such as security policies, synchronized.
FortiGate-7000F FGSP support has the following limitations:
- FortiGate-7000F FGSP doesn't support setting up IPv6 session filters using the
config session-sync-filteroption. - Asymmetric IPv6 SCTP traffic sessions are not supported. These sessions are dropped.
- Inter-cluster session synchronization, or FGSP between FGCP clusters, is not supported for the FortiGate-7000F.
- FGSP IPsec tunnel synchronization is not supported.
- Fragmented packet synchronization is not supported.