Fortinet 500A 사용자 설명서

다운로드
페이지 54
High availability installation 
Configuring FortiGate units for HA using the CLI
FortiGate-500A Installation Guide
01-28005-0101-20041015
 49
To configure the FortiGate unit for HA operation
1
Configure HA settings.
Use the following command to:
• Set the HA mode
• Set the Group ID
• Change the unit priority
• Enable override master
• Enter an HA password
• Select an active-active HA schedule
config system ha
set mode {a-a | a-p | standalone}
set groupid <id_integer>
set priority <priority_integer>
set override {disable | enable}
set password <password_str>
set schedule {hub | ip | ipport | leastconnection | none 
| random | round-robin | weight-round-robin}
end
The FortiGate unit negotiates to establish an HA cluster.
2
If you are configuring a NAT/Route mode cluster, power off the FortiGate unit and then 
repeat this procedure for all the FortiGate units in the cluster. Once all of the units are 
configured, continue with 
.
3
If you are configuring a Transparent mode cluster, switch the FortiGate unit to 
Transparent mode.
config system global
set opmode transparent
end
4
Allow the FortiGate unit to restart in Transparent mode and then power off the 
FortiGate unit.
5
Repeat this procedure for all of the FortiGate units in the cluster then continue with 
Connecting the cluster to your networks
Use the following procedure to connect a cluster operating in NAT/Route mode or 
Transparent mode. Connect the FortiGate units in the cluster to each other and to 
your network. You must connect all matching interfaces in the cluster to the same hub 
or switch. Then you must connect these interfaces to their networks using the same 
hub or switch.
Fortinet recommends using switches for all cluster connections for the best 
performance.