By Manny Fernandez

January 3, 2019

Fortigate HA in 5 Minutes

Fortigate HA in 5 Minutes

Here is a quick 5 min HA configuration for the Fortigate.

On the Master Fortigate

config system ha
set group-name "HAGroup"
set mode a-p
set password Fortinet
set hbdev "ha" 50 "port14" 0 
set session-pickup enable
set override disable
set priority 180
end

On the Slave Fortigate

config system ha
set group-name "HAGroup"
set mode a-p
set password Fortinet
set hbdev "ha" 50 "port14" 0 
set session-pickup enable
set override disable
set priority 125
end

On both these configuration, we are using the dedicated HA port and port 14 as HA sync ports. You will need to replace this with the interfaces you are using.  This config is Active/Passive. Priority is set to 180 and 125 respectively. The one with the higher priority is usually always the Master.

Fortinet Support Ticket: P1 to P4 Priority and SLA Guide

Fortinet Support Ticket: P1 to P4 Priority and SLA Guide

Open a Fortinet support ticket the right way: what each status means, P1 to P4 priority, severity, and the SLA for FortiCare Essential, Premium...

Read More
Fortinet ZTNA Explained: What It Is and How It Works

Fortinet ZTNA Explained: What It Is and How It Works

How Fortinet ZTNA actually decides who gets in: EMS-signed device certificates, user authentication, live posture tags, and per-app policy on the FortiGate access proxy....

Read More
Cisco Duo MFA for FortiGate Remote Access VPN: SAML and RADIUS on IKEv2

Cisco Duo MFA for FortiGate Remote Access VPN: SAML and RADIUS on IKEv2

Set up Duo FortiGate VPN MFA on IKEv2: Duo SSO as SAML IdP or the Duo Authentication Proxy over RADIUS, with configs, debugs, and...

Read More