FortiGate 60F HA Cluster Build

Let's try this again. This is a video about how to build an HA Cluster out of two FortiGate 60F's and 2 FortiSwitch 124F's.

My Other Projects:

###### SOCIAL LINKS ######
######################

[darkhsu]

Sounds like you have just been through a rough day. Cheer up Mike, we do like your videos. 😉

[JayZx]

I know I am late to the party, but I am doing the Fortigate implementation with the Cisco world (C9200 and C9300 L3). My Cisco's are set in HSRP and running inter vlan routing, hence the interfaces on the Fortis are setup as /30 and I run RIP on the Fortis, and EIGRP on rest of Cisco's environment then redistribute RIP to EIGRP LOL hahaha. Maybe it is time to ditch EIGRP and go with OSPF, but so far so good. I am not sure if I will ditch the C9200 and C9300s yet to Forti Switches, yet who knows. The future plan is to set the FortiNAC and test the integration with stuff like Meraki APs and Kanji for MAC auth. Anyhow, thanks for sharing the video, nice and simple!

[titangaming]

How do you wire the WAN ports on them? WAN1 and WAN 2 on both firewalls. If you only have one WAN drop from the ISP how does this work?

[portalend]

Could you do a video on transitioning from static routing to dynamic routing like OSPF? I'm sure lots of people start out on entirely static routes then reach a scale where it becomes a pain to manage. I'm interested in the specifics on how the static routing will interact with the dynamic routes during the transition. Asking for a friend. 😉

[JoeyGarcia]

I have a pair of 500D and 300D FortiGate firewalls. Each pair are in HA. Definitely nice to have in the enterprise! I'm planning on introducing a pair of 1024D's and hopefully utilize MC-LAG

[boyd]

Hello, can you explain more why the frotigate is degraded when primary/slave failed in active-active setup?

[balla]

Gave you credit with corporate armor for the whole new network I just bought. I'd love to get another 601 so I could do ha but the budget just isn't there unfortunately

[knithiyanandhan]

Need a Help: I need to allow port 3306 from outside company one particular IP address?

[DeesoSaeed]

Recently configured two Fortigates 200Fin HA and two Fortiswitch 524D as core with MCLAG ICL, then a buch of 148Fs hanging from the latter for edge switching

[ottawam]

1 - What options should we enable on the CLI to have a smooth failover?
2 - Can you do a video on using a firewall as layer 2, and maybe touch on how this works in a cluster?

[askmethod]

13:03 from where did u bring floating IP

[RaviChinasamy]

Great to see that you are back at last. 😊

[abdomordy]

how can i deploy Fortigate FW HA active-active on AWS in muli AZ environment with autoscalling?

[ITS-ykky]

The part about the device priority is wrong. The lower the number, the higher the priority.

[waqaskhan-cxdx]

I have to two fortigate firwall 201 f and want to configure cluster HA. And Also have to Wan connection. I need a little help with that. Can you please share your email address so we can discuss it sir.

[lazzybug]

Well it all look easy for you... I never did a irl setup so far ..hope I will be successful 🤞.. being a fresher in this field without any support..it feels so difficult 😭

[ian]

Hey...have a doubt here....
Did you get a chance to check the CAM LAN switch where the secondary ports sre connected?
They do not populate physical mac address of the Fortigate nic.... wanted to understand the concept

[dirkmare]

Hi Mike, new to fortigate fw I recently watched your video about firmware upgrades and your three rules.. I Would really like to use video content filtering but its only included in V7 and not V6.4.6

So I guess my question is for new out of the box setup is it save/advisable to upgrade to newer firmware's and when do you bite the bullet to do upgrades in production?
EXAMPLE: GA minus 2 versions

Thanks

[zSnowFlakesTV]

Guru, I'm having a really hard time finding a way to build a whitelist in fortiOS 7.0.2, could you make a video talking about white and blacklist rules? how to build it properly? I've been researching reddit and forti cookbock but I just can't figure out what I'm doing wrong. love your videos I learned a lot from you keep it up !!

[MladenMarinov]

Hi, I like you lectures.
Unfortunately I have problem you did not review - passing the multicast traffic from the provider to STB.
Can I contact you to guide me about this?