Fortinet black logo

Version:

Version:


Table of Contents

New Features

Download PDF
Copy Link

VRRP on EMAC-VLAN interfaces

Virtual Router Redundancy Protocol (VRRP) can be configured on EMAC-VLAN interfaces.

To configure the interfaces:
  1. Configure FortiGate A:

    config system interface
        edit "emac"
            set vdom "root"
            set ip 172.16.209.1 255.255.255.0
            set allowaccess ping https ssh snmp http telnet fgfm
            set type emac-vlan
            set vrrp-virtual-mac enable
            config vrrp
                edit 1
                    set vrip 172.16.209.111
                    set priority 200
                next
            end
            set snmp-index 61
            set interface "port1"
        next
    end
  2. Configure FortiGate B:

    config system interface
        edit "emac"
            set vdom "root"
            set ip 172.16.209.2 255.255.255.0
            set allowaccess ping https ssh snmp http telnet fgfm
            set type emac-vlan
            set vrrp-virtual-mac enable
            config vrrp
                edit 1
                    set vrip 172.16.209.111
                    set priority 222
                next
            end
            set snmp-index 32
            set interface "port1"
        next
    end
Check the VRRP information on the FortiGates:

Because FortiGate B has a higher priority, it is the primary device and FortiGate A is the backup.

  1. FortiGate A:

    # get router info vrrp
    Interface: emac, primary IP address: 172.16.209.1
      UseVMAC: 1, SoftSW: 0, EmacVlan: 1 BrPortIdx: 0, PromiscCount: 0
      HA mode: primary (0:0:1) VRRP master number: 0
      VRID: 1 verion: 2
        vrip: 172.16.209.111, priority: 200 (200,0), state: BACKUP
        adv_interval: 1, preempt: 1, ignore_dft: 0 start_time: 3
        master_adv_interval: 100, accept: 1
        vrmac: 00:00:5e:00:01:01
        vrdst:
        vrgrp: 0
  2. FortiGate B:

    # get router info vrrp
    Interface: emac, primary IP address: 172.16.209.2
      UseVMAC: 1, SoftSW: 0, EmacVlan: 1 BrPortIdx: 0, PromiscCount: 1
      HA mode: primary (0:0:1) VRRP master number: 1
      VRID: 1 verion: 2
        vrip: 172.16.209.111, priority: 222 (222,0), state: PRIMARY
        adv_interval: 1, preempt: 1, ignore_dft: 0 start_time: 3
        master_adv_interval: 100, accept: 1
        vrmac: 00:00:5e:00:01:01
        vrdst:
        vrgrp: 0

VRRP on EMAC-VLAN interfaces

Virtual Router Redundancy Protocol (VRRP) can be configured on EMAC-VLAN interfaces.

To configure the interfaces:
  1. Configure FortiGate A:

    config system interface
        edit "emac"
            set vdom "root"
            set ip 172.16.209.1 255.255.255.0
            set allowaccess ping https ssh snmp http telnet fgfm
            set type emac-vlan
            set vrrp-virtual-mac enable
            config vrrp
                edit 1
                    set vrip 172.16.209.111
                    set priority 200
                next
            end
            set snmp-index 61
            set interface "port1"
        next
    end
  2. Configure FortiGate B:

    config system interface
        edit "emac"
            set vdom "root"
            set ip 172.16.209.2 255.255.255.0
            set allowaccess ping https ssh snmp http telnet fgfm
            set type emac-vlan
            set vrrp-virtual-mac enable
            config vrrp
                edit 1
                    set vrip 172.16.209.111
                    set priority 222
                next
            end
            set snmp-index 32
            set interface "port1"
        next
    end
Check the VRRP information on the FortiGates:

Because FortiGate B has a higher priority, it is the primary device and FortiGate A is the backup.

  1. FortiGate A:

    # get router info vrrp
    Interface: emac, primary IP address: 172.16.209.1
      UseVMAC: 1, SoftSW: 0, EmacVlan: 1 BrPortIdx: 0, PromiscCount: 0
      HA mode: primary (0:0:1) VRRP master number: 0
      VRID: 1 verion: 2
        vrip: 172.16.209.111, priority: 200 (200,0), state: BACKUP
        adv_interval: 1, preempt: 1, ignore_dft: 0 start_time: 3
        master_adv_interval: 100, accept: 1
        vrmac: 00:00:5e:00:01:01
        vrdst:
        vrgrp: 0
  2. FortiGate B:

    # get router info vrrp
    Interface: emac, primary IP address: 172.16.209.2
      UseVMAC: 1, SoftSW: 0, EmacVlan: 1 BrPortIdx: 0, PromiscCount: 1
      HA mode: primary (0:0:1) VRRP master number: 1
      VRID: 1 verion: 2
        vrip: 172.16.209.111, priority: 222 (222,0), state: PRIMARY
        adv_interval: 1, preempt: 1, ignore_dft: 0 start_time: 3
        master_adv_interval: 100, accept: 1
        vrmac: 00:00:5e:00:01:01
        vrdst:
        vrgrp: 0