Fortinet black logo

Handbook

VRRP

6.0.0
Copy Link
Copy Doc ID 4afb0436-a998-11e9-81a4-00505692583a:838896
Download PDF

VRRP

FortiGates can function as primary or backup Virtual Router Redundancy Protocol (VRRP) routers and can be quickly and easily integrated into a network that has already deployed VRRP. A FortiGate can be integrated into a VRRP group with any third-party VRRP devices and VRRP can provide redundancy between multiple FortiGates. FortiOS supports VRRP version 2 and 3.

In a VRRP configuration, when a FortiGate operating as the primary router fails, a backup router takes its place and continues processing network traffic. If the backup router is a FortiGate, the network continues to benefit from FortiOS security features. If the backup router is simply a router, after a failure traffic will continue to flow, but FortiOS security features will be unavailable until the FortiGate is back on line. You can include different FortiGate models in the same VRRP group.

FortiOS supports IPv4 and IPv6 VRRP between two or more FortiGates and between FortiGates and third-party routers that support VRRP. Using VRRP, you can assign VRRP routers as primary or backup routers. The primary router processes traffic and the backup routers monitor the primary router and can begin forwarding traffic if the primary router fails. Similar to the FGCP, you can set up VRRP among multiple FortiGates to provide redundancy. You can also create a VRRP group with a FortiGate and any routers that support VRRP.

In a VRRP configuration that includes one FortiGate and one router, normally the FortiGate would be the primary router and all traffic would be processed by the FortiGate. If the FortiGate fails, all traffic switches to the router. Network connectivity is maintained even though FortiGate security features are unavailable until the FortiGate is back on line.

VRRP

FortiGates can function as primary or backup Virtual Router Redundancy Protocol (VRRP) routers and can be quickly and easily integrated into a network that has already deployed VRRP. A FortiGate can be integrated into a VRRP group with any third-party VRRP devices and VRRP can provide redundancy between multiple FortiGates. FortiOS supports VRRP version 2 and 3.

In a VRRP configuration, when a FortiGate operating as the primary router fails, a backup router takes its place and continues processing network traffic. If the backup router is a FortiGate, the network continues to benefit from FortiOS security features. If the backup router is simply a router, after a failure traffic will continue to flow, but FortiOS security features will be unavailable until the FortiGate is back on line. You can include different FortiGate models in the same VRRP group.

FortiOS supports IPv4 and IPv6 VRRP between two or more FortiGates and between FortiGates and third-party routers that support VRRP. Using VRRP, you can assign VRRP routers as primary or backup routers. The primary router processes traffic and the backup routers monitor the primary router and can begin forwarding traffic if the primary router fails. Similar to the FGCP, you can set up VRRP among multiple FortiGates to provide redundancy. You can also create a VRRP group with a FortiGate and any routers that support VRRP.

In a VRRP configuration that includes one FortiGate and one router, normally the FortiGate would be the primary router and all traffic would be processed by the FortiGate. If the FortiGate fails, all traffic switches to the router. Network connectivity is maintained even though FortiGate security features are unavailable until the FortiGate is back on line.