Virtual Router Redundancy Protocol
Virtual Router Redundancy Protocol (VRRP)
is a protocol to provide device redundancy with a backup router. If the primary (master) router fails, a backup router takes over. The routers are grouped together in a single virtual router with a single IP address. The master router will always process traffic that is addressed to the virtual router address and sends out regular advertisements to the backup router. If the master experiences a failure, the backup router no longer receives advertisements and becomes the primary router. The VRRP protocol is an open standard and is implemented by many router vendors. FortiGate firewalls can be used in a VRRP cluster with other non-Fortinet devices. The configuration requires using the config vrrp
command inside the configuration of the interface that connects to the master unit. The structure of this command is as follows:
config vrrp
edit <VRID_int>
: Enter an ID for the virtual router.
set adv-interval ...