2 Ipsec site to site tunnel to the same location

Hello,

Thank you for contacting Fortinet support, you can refer the below KB in order to understand how to configure it.

REF:https://community.fortinet.com/t5/FortiGate/Technical-Tip-Configure-IPsec-VPN-with-SD-WAN/ta-p/209840

REF: https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-bond-2-ISP-with-SD-WAN-and-load-balance/ta-p/248772

Above documents support the way you want to configure your network.

Best Regards,

Piyush

can I piggyback and ask if this provides more granular  control then just using link-monitor? I have always used link monitor for ipsec tunnels redundancy and sdwan for wan redundancy 

if you are not using sdwan for the ipsec itself the answer is simple: you :)

In this cave you have to have redundant routing with prio and distance set the way you want the VPNs to be used. It will then primarily use the one that has the lowest routing prio. If they have the same prio it will chose the lowest distance. If that tunnel goes down it will switch over to the other one.

Did that with numerous IPSec S2S Tunnels for years. Meanwhile I switched over to sdwan vpn because that only needs one route and sdwan does the rest then ;)

oh probably I should mention that sdwan vpn was introduced with FortiOS 7.0.x. So it is not supported in older FortiOSes. Just fyi...