I recently set up 2x Fortigate 200B units to run in HA Active/Active mode, this posed a number of challenges: HA doesn’t work if any interfaces use PPPoE or have an address assigned via DHCP How do I effectively split our network communications between both units? Challenge 1 The main problem was that both the […]
Fortigate units (the big ones at least) come configured in what is called “switch mode” meaning it groups a number of interfaces together and makes them act as a switch, serves DHCP over these interfaces, etc. Most companies don’t like to use this – instead if we want to up our throughput for a given […]
Fortigate’s logging typically isn’t the best – but it’s bad when you have no logs at all, which seems to be the default. To enable logging Why not follow @mylesagray on Twitter for more like this!
Centrally managing your storage is nice – especially when you’ve just built your own SANs (or such). I created a synchronous replicating SAN cluster using LSI MegaRAID 9270-8i cards in 2x Dell R720XD chassis built on openSUSE 12.3 (more on that in another article soon). We are migrating from 2x Dell MD3000i to these beasts […]
So you’ve downloaded all the new VMWare 5.5 goodies and you want to upgrade your vCSA install to v5.5 – this is a little more involved than you may think, however it is very much worth the effort: In vSphere 5.5, the vCenter Server Appliance limitations have been extremely raised when using the embedded database: Previous […]
Again, Fortigate’s documentation falls down at the simplest of things, this time, syslogging – To get your Fortigate to log to a syslogger (like Kiwi/Splunk) you’ll need to go in via the CLI as they have removed this option from the GUI as of FortiOS v5.0. Log in via shell and enter the following: config […]
Recently had a problem were Veeam was giving bother on one VM that had a dedicated datastore, not allowing hot-add virtual appliance mode to work. I originally thought it was a problem with CBT (changed block tracking) so I disabled that, with no luck, as it transpires there were a few (all datastore formatting related) […]
VMWare’s vSAN Community site has been launched today in preparation for the release of vSphere 5.5 including the new vSAN feature (clustered, replicated local storage on hosts acting as a “Virtual SAN”). You can have a look at the walkthroughs here. You can sign up for the beta program here, more vSAN info available here. […]
This info is quite hard to come across and Fortigate don’t have it in their GUI from FortiOS v5.0+, SSH into your Fortigate’s CLI and enter the following (it can be done on both software aggregated and standard interfaces): config system interface edit [interfacename] set mtu-override enable set mtu 9208 end end Confirm your MTU […]
Fairly straight forward this time, you’ve configured your MTU/jumbo frames to be 9000 on your client and destination devices (say a laptop/desktop/server/san/nas) and on ALL your switching devices in between – you’ve done that right? ;) Why not follow @mylesagray on Twitter for more like this!