Load Balancing in FortiGate Firewall

Network Diagram:

FireWall Setting:

config system settings

    set gui-proxy-inspection enable

    set gui-load-balance enable

end

Firewall Rule:

config firewall policy

    edit 1

        set name "LB"

        set uuid d83e61d0-82a8-51ee-abca-22e6f65c4028

        set srcintf "port2"

        set dstintf "port1"

        set action accept

        set srcaddr "all"

        set dstaddr "LB_IP"

        set schedule "always"

        set service "ALL"

        set inspection-mode proxy

        set nat enable

    next

end

Interface:

config system interface

    edit "port1"

        set vdom "root"

        set ip 192.168.0.108 255.255.255.0

        set allowaccess ping https ssh http

        set type physical

        set netflow-sampler both

        set snmp-index 1

        set mtu-override enable

        set mtu 1000

    next

    edit "port2"

        set vdom "root"

        set ip 14.140.40.108 255.255.255.0

        set allowaccess ping

        set type physical

        set snmp-index 2

    next

VIP with load balancing using Round Robin:

 edit "LB_IP"

        set uuid 1e6869a6-82ec-51ee-565c-9eb1868be7fa

        set type server-load-balance

        set server-type ip

        set extip 14.140.40.99

        set extintf "port2"

        set monitor "LB"

        set ldb-method round-robin

        config realservers

            edit 1

                set ip 192.168.0.4

            next

            edit 2

                set ip 192.168.0.5

            next

            edit 3

                set ip 192.168.0.6

            next

        end

    next

end