FortiGate-5140 fabric backplane communication
Example active-passive redundant link configuration
FortiSwitch-5003A and 5003 Fabric and Base Backplane Communications Guide
01-30000-85717-20081205
43
Example FortiGate-5001A configuration
All of the FortiGate-5001A boards must be operating in transparent mode and all
must have the same configuration.
The spanning tree instances can send traffic to fabric channel 1 or fabric channel
2. As a result, traffic can enter and exit the FortiGate-5001A boards using the
fabric1 interface or the fabric2 interface. So you should create redundant
configurations for each fabric interface. For each fabric interface you must add
four VLAN interfaces, two for traffic from both Internal networks and two for traffic
from both external networks. Then for each fabric interface you must add firewall
policies for traffic between the four VLAN interfaces.
For example, for the fabric1 interface you could name the VLAN interfaces
vlan_fab1_103
,
vlan_fab1-104
,
vlan_fab1_105
, and
vlan_fab1-106
.
From the FortiGate-5001A CLI enter:
config system interface
edit vlan_fab1_103
set interface fabric1
set vlanid 103
set vdom root
etc...
next
edit vlan_fab1_104
set interface fabric1
set vlanid 104
set vdom root
etc...
edit vlan_fab1_105
set interface fabric1
set vlanid 105
set vdom root
etc...
next
edit vlan_fab1_106
set interface fabric1
set vlanid 106
set vdom root
etc...
end
For the fabric2 interface you could name the VLAN interfaces
vlan_fab2_103
,
vlan_fab2-104
,
vlan_fab2_105
, and
vlan_fab2-106
. From the
FortiGate-5001A CLI enter:
config system interface
edit vlan_fab2_103
set interface fabric2
set vlanid 103
set vdom root
etc...
next
edit vlan_fab2_104
set interface fabric2
set vlanid 104
set vdom root
etc...
