High availability with two FortiGates

This example describes how to add a backup FortiGate to a previously installed FortiGate, to form a high availability (HA) cluster to improve network reliability.

Before you begin, check the following:

• The FortiGates are running the same FortiOS firmware version.
• Interfaces are not configured to get their addresses from DHCP or PPPoE.
• A switch port is not used as an HA heartbeat interface. If necessary, convert the switch port to individual interfaces.

This example is in the Fortinet Security Fabric collection. It can also be used as a standalone recipe.

This example uses the FortiGate Clustering Protocol (FGCP) for HA. After you complete this example, the original FortiGate continues to operate as the primary FortiGate and the new FortiGate operates as the backup FortiGate.

For a more advanced HA example that includes CLI steps and involves using advanced options such as override to maintain the same primary FortiGate, see High availability with FGCP (expert).