VRRP on EMAC-VLAN interfaces

Virtual Router Redundancy Protocol (VRRP) can be configured on EMAC-VLAN interfaces.

To configure the interfaces:

1. Configure FortiGate A:

   config system interface
       edit "emac"
           set vdom "root"
           set ip 172.16.209.1 255.255.255.0
           set allowaccess ping https ssh snmp http telnet fgfm
           set type emac-vlan
           set vrrp-virtual-mac enable
           config vrrp
               edit 1
                   set vrip 172.16.209.111
                   set priority 200
               next
           end
           set snmp-index 61
           set interface "port1"
       next
   end

2. Configure FortiGate B:

   config system interface
       edit "emac"
           set vdom "root"
           set ip 172.16.209.2 255.255.255.0
           set allowaccess ping https ssh snmp http telnet fgfm
           set type emac-vlan
           set vrrp-virtual-mac enable
           config vrrp
               edit 1
                   set vrip 172.16.209.111
                   set priority 222
               next
           end
           set snmp-index 32
           set interface "port1"
       next
   end

Check the VRRP information on the FortiGates:

Because FortiGate B has a higher priority, it is the primary device and FortiGate A is the backup.

1. FortiGate A:

   # get router info vrrp
   Interface: emac, primary IP address: 172.16.209.1
     UseVMAC: 1, SoftSW: 0, EmacVlan: 1 BrPortIdx: 0, PromiscCount: 0
     HA mode: primary (0:0:1) VRRP master number: 0
     VRID: 1 verion: 2
       vrip: 172.16.209.111, priority: 200 (200,0), state: BACKUP
       adv_interval: 1, preempt: 1, ignore_dft: 0 start_time: 3
       master_adv_interval: 100, accept: 1
       vrmac: 00:00:5e:00:01:01
       vrdst:
       vrgrp: 0

2. FortiGate B:

   # get router info vrrp
   Interface: emac, primary IP address: 172.16.209.2
     UseVMAC: 1, SoftSW: 0, EmacVlan: 1 BrPortIdx: 0, PromiscCount: 1
     HA mode: primary (0:0:1) VRRP master number: 1
     VRID: 1 verion: 2
       vrip: 172.16.209.111, priority: 222 (222,0), state: PRIMARY
       adv_interval: 1, preempt: 1, ignore_dft: 0 start_time: 3
       master_adv_interval: 100, accept: 1
       vrmac: 00:00:5e:00:01:01
       vrdst:
       vrgrp: 0