Wednesday, March 14, 2018

Configuring HA on fortigate firewalls with multiple VDOMs (x-post r/fortinet)

Original post but asking here for more exposure

https://www.reddit.com/r/fortinet/comments/84enty/ha_with_multiple_vdoms/

I will try and add as much detail as I can however I have a situation where we are looking to create an HA cluster with 100E that will need to manage multiple VDOMs that have been provisioned as external/internal configurations e.g as basically separate firewalls with their own public IPs and internal networks.

They will be connected to a layer 3 switch with the WAN connection coming into the switch and ports set with untagged VLANs for each of the VDOMs for internet access. There is a route statement that routes all of this traffic to the WAN connection which itself is a separate untagged vlan port.

Are there any good recommendations or feedback on how I would achieve an HA setup with this type of configuration or if it needs to be redesigned perhaps provide some high level pointers?



No comments:

Post a Comment