The FortiGate 40F is the sole edge firewall. Any failure means complete loss of internet connectivity and all 3 IPsec site-to-site tunnels simultaneously.
Add a second FortiGate 40F in Active-Passive HA mode. Config sync ensures seamless failover with no manual intervention required.
📡 No Redundant WAN — Fibre Only
Running on a single Fibre ISP link. If the link drops, all connectivity is lost — internet, remote management, and all 3 site-to-site tunnels go down with it.
Add a MikroTik LTE router connected to both FortiGates. FortiGate SD-WAN monitors link health and auto-fails to LTE within seconds of detecting failure.
⚡ Arista 7010T — Single Point of Failure
The Arista is the sole L3 core switch. A failure here simultaneously isolates both access switches, all servers, all APs — total network outage for every downstream device.
Add a second Arista 7010T and configure MLAG between the pair. Connect Proxmox and Linux servers via dual uplinks across both Aristas for active-active redundancy.
🔌 Server NICs Bottlenecked at 1G
Both Proxmox hypervisor and Linux Ubuntu server connect at 1G only. With 10G MMF fibre available at the Arista, this creates a significant bottleneck for VM migrations, storage and backup traffic.
Upgrade both servers to dual 10G NICs (Intel X550-T2 or Mellanox ConnectX-3). Bond as LACP into the dual Arista MLAG pair for speed and redundancy.