search

fortinet / aws-cloudformation-templates

Cloud Formation Templates for getting you started in AWS with Fortinet.
MIT License
34 stars 67 forks source link

Secondary EIP Failover in Multi AZ #12

Closed garyfancy closed 2 years ago

garyfancy commented 2 years ago

New to github, not sure if this is the correct way to ask a question?

According to the documentation at the end of the Multi AZ 6.4 template it states that secondary EIPs should failover as well. Does this actually apply to a MultiAZ deployment?

**Does FGCP support having multiple Cluster EIPs and secondary IPs on ENI0\port1?

Yes. FGCP will move over any secondary IPs associated to ENI0\port1 and EIPs associated to those secondary IPs to the new master FortiGate instance. You will need to configure secondary IPs on the ENI via the AWS EC2 Console and in FortiOS for port1. The private IPs configured on the ENI and FortiOS must match.**

garyfancy commented 2 years ago

This does work, had a dns issue where ec2 api couldn't be resolved so the IPs never moved. Fixed dns, fixed the EIP moving.