Fortinet black logo

Cookbook

HA virtual cluster setup

Copy Link
Copy Doc ID fed12558-14f5-11e9-b86b-00505692583a:599385
Download PDF

HA virtual cluster setup

An HA virtual cluster can be set up using the GUI or CLI.

This example uses the following network topology:

Note

HA virtual clusters are based on VDOMs and are more complicated than regular clusters.

To set up an HA virtual cluster using the GUI:
  1. Make all the necessary connections as shown in the topology diagram.
  2. Log into one of the FortiGates.
  3. Go to System > HA and set the following options:

    Mode

    Active-Passive

    Device priority

    128 or higher

    Group name

    Example_cluster

    Heartbeat interfaces

    ha1 and ha2

    Except for the device priority, these settings must be the same on all FortiGates in the cluster.

  4. Leave the remaining settings as their default values. They can be changed after the cluster is in operation.
  5. Click OK.

    The FortiGate negotiates to establish an HA cluster. Connectivity with the FortiGate may be temporarily lost as the HA cluster negotiates and the FGCP changes the MAC addresses of the FortiGate's interfaces.

  6. Factory reset the other FortiGate that will be in the cluster, configure GUI access, then repeat steps 1 to 5, omitting setting the device priority, to join the cluster.
  7. Go to System > Settings and enable Virtual Domains.
  8. Click Apply. You will be logged out of the FortiGate.
  9. Log back into the FortiGate, ensure that you are in the global VDOM, and go to System > VDOM.
  10. Create two new VDOMs, such as VD1 and VD2:
    1. Click Create New. The New Virtual Domain page opens.
    2. Enter a name for the VDOM in the Virtual Domain field, then click OK to create the VDOM.
    3. Repeat these steps to create a second new VDOM.
  11. Implement a virtual cluster by moving the new VDOMs to Virtual cluster 2:
    1. Go to System > HA.
    2. Enable VDOM Partitioning.
    3. Click on the Virtual cluster 2 field and select the new VDOMs.

    4. Click OK.
To set up an HA virtual cluster using the CLI:
  1. Make all the necessary connections as shown in the topology diagram.
  2. Set up a regular A-P cluster. See HA active-passive cluster setup.
  3. Enable VDOMs:
    config system global
        set vdom-mode multi-vdom
    end

    You will be logged out of the FortiGate.

  4. Create two VDOMs:
    config vdom
        edit VD1
        next
        edit VD2
        next
    end
  5. Reconfigure the HA settings to be a virtual cluster:
    config global
        config system ha    
            set vcluster2 enable
            config secondary-vcluster
                set vdom "VD1" "VD2"
            end
        end
    end

HA virtual cluster setup

An HA virtual cluster can be set up using the GUI or CLI.

This example uses the following network topology:

Note

HA virtual clusters are based on VDOMs and are more complicated than regular clusters.

To set up an HA virtual cluster using the GUI:
  1. Make all the necessary connections as shown in the topology diagram.
  2. Log into one of the FortiGates.
  3. Go to System > HA and set the following options:

    Mode

    Active-Passive

    Device priority

    128 or higher

    Group name

    Example_cluster

    Heartbeat interfaces

    ha1 and ha2

    Except for the device priority, these settings must be the same on all FortiGates in the cluster.

  4. Leave the remaining settings as their default values. They can be changed after the cluster is in operation.
  5. Click OK.

    The FortiGate negotiates to establish an HA cluster. Connectivity with the FortiGate may be temporarily lost as the HA cluster negotiates and the FGCP changes the MAC addresses of the FortiGate's interfaces.

  6. Factory reset the other FortiGate that will be in the cluster, configure GUI access, then repeat steps 1 to 5, omitting setting the device priority, to join the cluster.
  7. Go to System > Settings and enable Virtual Domains.
  8. Click Apply. You will be logged out of the FortiGate.
  9. Log back into the FortiGate, ensure that you are in the global VDOM, and go to System > VDOM.
  10. Create two new VDOMs, such as VD1 and VD2:
    1. Click Create New. The New Virtual Domain page opens.
    2. Enter a name for the VDOM in the Virtual Domain field, then click OK to create the VDOM.
    3. Repeat these steps to create a second new VDOM.
  11. Implement a virtual cluster by moving the new VDOMs to Virtual cluster 2:
    1. Go to System > HA.
    2. Enable VDOM Partitioning.
    3. Click on the Virtual cluster 2 field and select the new VDOMs.

    4. Click OK.
To set up an HA virtual cluster using the CLI:
  1. Make all the necessary connections as shown in the topology diagram.
  2. Set up a regular A-P cluster. See HA active-passive cluster setup.
  3. Enable VDOMs:
    config system global
        set vdom-mode multi-vdom
    end

    You will be logged out of the FortiGate.

  4. Create two VDOMs:
    config vdom
        edit VD1
        next
        edit VD2
        next
    end
  5. Reconfigure the HA settings to be a virtual cluster:
    config global
        config system ha    
            set vcluster2 enable
            config secondary-vcluster
                set vdom "VD1" "VD2"
            end
        end
    end