Fortinet black logo

FortiGate-7000F Handbook

Home FortiGate-7000 7.0.15 FortiGate-7000F Handbook
7.0.15
7.0.15
7.0.14
7.0.13
7.0.12
7.0.10
7.0.5
6.4.15
6.4.14
6.4.13
6.4.12
6.4.10
6.4.8
6.4.6
6.2.16
6.2.16
6.2.15
6.2.13
6.2.12
6.2.11
6.2.10
6.2.9
6.2.7
6.2.6

Before you begin configuring HA

Before you begin configuring HA

Before you begin:

  • The FortiGate 7000Fs must be running the same FortiOS firmware version.
  • The FortiGate 7000Fs must be in the same VDOM mode (Multi VDOM or Split-Task VDOM mode).

  • To successfully form an FGCP HA cluster, both FortiGate 7000Fs must be operating in the same VDOM mode (Multi or Split-Task). You should change both FortiGate 7000Fs to the VDOM mode that you want them to operate in before configuring HA. To change the VDOM mode of an operating cluster, you need remove the backup FortiGate 7000F from the cluster, switch both FortiGate 7000Fs to the other VDOM mode and then re-form the cluster. This process will cause traffic interruptions.

  • Interfaces should be configured with static IP addresses (not DHCP or PPPoE).
  • Register and apply licenses to each FortiGate 7000F before setting up the HA cluster. This includes licensing for FortiCare, IPS, AntiVirus, Web Filtering, Mobile Malware, FortiClient, FortiCloud, and additional virtual domains (VDOMs).
  • Both FortiGate 7000Fs in the cluster must have the same level of licensing for FortiGuard, FortiCloud, FortiClient, and VDOMs.
  • FortiToken licenses can be added at any time because they are synchronized to all cluster members.

  • Both FIMs in both FortiGate 7000Fs in a cluster must have the same log disk and RAID configuration. Use the execute disk list command to confirm the log disk configuration of each FIM in each FortiGate 7000F.

Changing the interfaces configuration before configuring HA

You should configure split interfaces on both FortiGate 7000Fs before forming an FGCP HA cluster. If you decide to change the split interface configuration after forming a cluster, you need to remove the secondary FortiGate 7000F from the cluster and change the split interface configuration on both FortiGate 7000Fs separately. After the FortiGate 7000Fs restart, you can re-form the cluster. This process will cause traffic interruptions.

For information about splitting FIM-7921F interfaces and changing FIM-7921F interface types, see Changing the FIM-7921F 19 and 20 interfaces.

After changing the interface configurations, check each FortiGate 7000F, make sure configurations of the FIMs and FPMs are synchronized before starting to configure HA. See Confirming that the FortiGate 7000F HA cluster is synchronized .

Previous
Next

Before you begin configuring HA

Before you begin:

  • The FortiGate 7000Fs must be running the same FortiOS firmware version.
  • The FortiGate 7000Fs must be in the same VDOM mode (Multi VDOM or Split-Task VDOM mode).

  • To successfully form an FGCP HA cluster, both FortiGate 7000Fs must be operating in the same VDOM mode (Multi or Split-Task). You should change both FortiGate 7000Fs to the VDOM mode that you want them to operate in before configuring HA. To change the VDOM mode of an operating cluster, you need remove the backup FortiGate 7000F from the cluster, switch both FortiGate 7000Fs to the other VDOM mode and then re-form the cluster. This process will cause traffic interruptions.

  • Interfaces should be configured with static IP addresses (not DHCP or PPPoE).
  • Register and apply licenses to each FortiGate 7000F before setting up the HA cluster. This includes licensing for FortiCare, IPS, AntiVirus, Web Filtering, Mobile Malware, FortiClient, FortiCloud, and additional virtual domains (VDOMs).
  • Both FortiGate 7000Fs in the cluster must have the same level of licensing for FortiGuard, FortiCloud, FortiClient, and VDOMs.
  • FortiToken licenses can be added at any time because they are synchronized to all cluster members.

  • Both FIMs in both FortiGate 7000Fs in a cluster must have the same log disk and RAID configuration. Use the execute disk list command to confirm the log disk configuration of each FIM in each FortiGate 7000F.

Changing the interfaces configuration before configuring HA

You should configure split interfaces on both FortiGate 7000Fs before forming an FGCP HA cluster. If you decide to change the split interface configuration after forming a cluster, you need to remove the secondary FortiGate 7000F from the cluster and change the split interface configuration on both FortiGate 7000Fs separately. After the FortiGate 7000Fs restart, you can re-form the cluster. This process will cause traffic interruptions.

For information about splitting FIM-7921F interfaces and changing FIM-7921F interface types, see Changing the FIM-7921F 19 and 20 interfaces.

After changing the interface configurations, check each FortiGate 7000F, make sure configurations of the FIMs and FPMs are synchronized before starting to configure HA. See Confirming that the FortiGate 7000F HA cluster is synchronized .

Previous
Next