Fortinet Secure SD-WAN High Availability (HA) Failover Demo | Secure SD-WAN

hi everyone a question i get a lot is whether and how our secure sd-wan solution supports high availability and more specifically device h a well i'm happy to say that four net secure sd-wan not only provides uh robust wan resiliency but also many options for device ha which can accommodate the redundancy needs of different environments while we support both active active and active passive ha the most common aha option in our sd-wan deployments is to have the two fortigates at the branch in an active passive configuration like the one you see on the screen to demonstrate this i quickly put together an active passive ha setup at home and caught up with my colleague praveen to quickly show him the seamless failover of applications in the event one of the fortigates go down hey praveen hey thanks for joining me i just want to show you really quick this uh sd-wan running high availability in an active passive configuration demo just want to show that hey when you have it in this configuration you can have a big demo you can you know and if something happens to the ford gate it'll seamlessly fail over to the backup for the gate and your existing download will um keep going seamlessly as if nothing happened okay uh as you can see my uh my wi-fi is off i am connected directly um to the lan side of of this setup um and uh yeah and we're logged into the fortigate um you can see that we're we're currently in the primary and the high availability high availability setup is here primary and backup um if i go to system and ha it was a very easy and straightforward configuration okay on the sd-wan side of things i have two wan links i have wam one and when two we have a health check running to poll office 365 and we use that health check in sd-wan rules we have an sd-wan rule that's uh configured to prefer uh want to over wan one for office 365 traffic so if we jump right in you can take a look all right and so let's go ahead and start our download okay save this iso and as you can see our download is uh happening okay and we can go on to the fordigate to verify so do for the view all right as you can see this download is happening on lan 2 okay on a side note you know our zoom meeting also shows up on florida view as well okay so that's also going through this fortigate so now what we're going to do is we're going to hop into the cli and we added the ability to trigger to simulate a failover to um without the need to pull the the actual power plug and potentially damage corrupt the disk or you know other bad things so we're going to just type um exec h a failover basically we are doing a fourth failover yep yep okay so what's going to happen is we're we should in theory lose connectivity to our ui and so let's jump out of this and sure enough we've lost connectivity however it should right away fail over to the backup so if we try to access the ui again we get the ui of the backup for the gate instead of the primary and all the while let's take a look at our download our download is still going you see that right yes going on okay so just to check um let's go to four to view on the backup you can see our uh download session right from sharepoint from onedrive uh the download is still happening and it's also on lan 2 because these these two florida gates have synchronized configuration okay and what we want to do now i mean we can refresh and here it is and you can see our zoom call being moved too yeah you see that and our you know so far the the call has been smooth i hear you you see me um which is great so let's go ahead and fail back so to do that i am logged into the console through a serial connection and i'm just going to undo my failover so basically with the large file downloads and also video in video conference right when you're having these things when we do failover there is like seamless failover exactly okay so we lost connect connectivity to the backup because actually the the primary has taken over just gonna refresh log on back into the primary okay let's take a look at our download it's still going which is great let's hop into ford of view and you can see our download right here move back to the wan to port on the primary ford gate and so has our zoom meeting so um everything is working as as should um and i i think that that's our down and that's our demo so um yeah it looks you know and uh it's like a seamless failover and i don't see anything disruption of the service with respect to zoom or like a download happening on the background so it's like perfectly sd-wan failover yeah exactly in each case the session was moved um from the primary to the backup and just picked up seamlessly right right where it left off right all right thanks praveen yeah thank you peter for showing this demo yeah see ya yeah so that concludes our demo and as you can see the hea in fortinet secure sd-wan setup is easy to deploy and can seamlessly fail over and preserve existing application flows for more information click on the link in the description i hope you found it useful and thanks for watching

Channel: Fortinet

Views: 5,208

Rating: 4.927928 out of 5

Keywords: Fortinet, SD-WAN, WAN Edge, Secure SD-WAN, FortiOS, High Availability, HA, Failover, Application aware routing, routing, analytics, reporting, NGFW, software defined WAN, wide area network, technology, fortigate, cybersecurity, palo alto networks, check point software, networking, network security, security, hacker, hack, hacked, hacking, infosec, information security, netsec, cybersec, fabricready, fabric ready, security fabric, ftnt

Id: z7DsSliU-NA

Length: 7min 31sec (451 seconds)

Published: Mon Jan 04 2021