High availability HA in Transparent mode
FortiGate-400 Installation and Configuration Guide 83
5 Change the HA IP address and Netmask as required.
6 Optionally configure management access for other interfaces.
7 Select Apply.
Now that you have configured the HA interfaces, proceed to “Configuring the HA
cluster”.
Configuring the HA cluster
Use the following procedure to configure each FortiGate unit for HA before connecting
the HA cluster to your network.
1 Connect to the FortiGate unit and log into the web-based manager.
2 Go to System > Config > HA.
3 Select HA.
You can only select HA if the 4/HA interface is configured for HA operation. See
“Configuring the HA interface and HA IP address” on page 82.
4 Select the HA mode.
Select Active-Passive mode to create an Active-Passive HA cluster, in which one
FortiGate unit in the HA cluster is actively processing all connections and the others
are passively monitoring the status and remaining synchronized with the active
FortiGate unit.
Select Active-Active mode to create an Active-Active HA cluster, in which each
FortiGate unit in the HA cluster is actively processing connections and monitoring the
status of the other FortiGate units.
The HA mode must be the same for all FortiGate units in the HA cluster.
5 Enter and confirm a password for the HA cluster.
The password must be the same for all FortiGate units in the HA cluster.
6 Select a Group ID for the HA cluster.
The Group ID must be the same for all FortiGate units in the HA cluster.
HTTPS To allow secure HTTPS connections to the web-based manager through this
interface.
PING If you want this interface to respond to pings. Use this setting to verify your
installation and for testing.
HTTP To allow HTTP connections to the web-based manager through this interface.
HTTP connections are not secure and can be intercepted by a third party.
SSH To allow secure SSH connections to the CLI through this interface.
SNMP To allow a remote SNMP manager to request SNMP information by connecting to
this interface.
TELNET To allow Telnet connections to the CLI through this interface. Telnet connections
are not secure and can be intercepted by a third party.
Note: These instructions describe configuring each of the FortiGate units in the HA cluster
before connecting the HA cluster to your network. You can also use the procedure “Connecting
the HA cluster to your network” on page 85 to connect the HA cluster to your network first.
