FortiOS 5.6 Online Help Link FortiOS 5.4 Online Help Link FortiOS 5.2 Online Help Link FortiOS 5.0 Online Help Link

Home > Online Help

> Chapter 15 - High Availability > VRRP > Example VRRP configuration: VRRP load balancing two FortiGate units and two VRRP groups

Example VRRP configuration: VRRP load balancing two FortiGates and two VRRP groups

In this configuration two VRRP groups are involved. Each FortiGate participates in both of them. One FortiGate is the master of one group and the other FortiGate is the master of the other group. The network distributes traffic between two different default routes (10.31.101.120 and 10.31.101.130). One VRRP group is configured with one of the default route IP addresses and the other VRRP group get the other default route IP address. So during normal operation both FortiGates are processing traffic and the VRRP groups are used to load balance the traffic between the two FortiGates.

If one of the FortiGates fails, the remaining FortiGate becomes the master of both VRRP groups. The network sends all traffic for both default routes to this FortiGate. The result is a configuration that under normal operation load balances traffic between two FortiGates, but if one of the FortiGates fails, all traffic fails over to the unit that is still operating.

This example also includes enabling the VRRP virtual MAC address on both FortiGate port2 interfaces so that the VRRP groups use their VRRP virtual MAC addresses.

Example VRRP configuration with two FortiGates and two VRRP groups

To configure the FortiGates
  1. Log into the CLI of FortiGate A.
  2. Enter the following command to enable the VRRP virtual MAC address feature and add the VRRP groups to the port2 interface of FortiGate A:

config system interface

edit port2

set vrrp-virtual-mac enable

config vrrp

edit 50 (32)

set vrip 10.31.101.120

set priority 255

next

edit 100 (64)

set vrip 10.31.101.130

set priority 50

end

end

 

  1. Log into the CLI of FortiGate B.
  2. Enter the following command to enable the VRRP virtual MAC address feature and add the VRRP groups to the port2 interface of FortiGate B:

config system interface

edit port2

set vrrp-virtual-mac enable

config vrrp

edit 50

set vrip 10.31.101.120

set priority 50

next

edit 100

set vrip 10.31.101.130

set priority 255

end

end