Technical Tip: Remotely login to the FortiGate via multiple WAN interfaces

1. Equal distance for default routes.

The default routes associated with each WAN interface have equal distance. This is important for enabling failover and ensuring that the FortiGate can route traffic correctly.

2. Reverse path lookup.

The FortiGate performs a reverse path lookup to prevent spoofed traffic. If no entry is found in the routing table that sends the return traffic out the same interface, the incoming traffic will be dropped. It is therefore important to configure the routing table correctly to allow responses to be sent out through the same interface that received the request.

• When configuring dual WAN interfaces for fail-over, both interfaces are properly set up to handle administrative access.
• This involves configuring specific policies or settings to allow management traffic through both interfaces.