2 WAN but only allow certain subnet to use WAN 1, certain subnet to use WAN 2

Forum|Forum|7 years ago
December 5, 2018
3 replies
3922 views

I am having 2 WAN with 2 different Telco on 60E. I have try to use policy to only allow subnet A to use WAN 1 to access internet by Telco A and subnet B to use WAN 2 to access the internet by Telco B. But I am not able to do that due to the static route of 0.0.0.0 /0.0.0.0 is route to WAN 2. Please advise is there a way, thanks

sw2090

SuperUser

maybe setting up a 2nd defaut route for wan1 with different metric/prio might help?

lobstercreed

New Member

Hi pg.ns,

Unfortunately Sebastian's suggestion won't work the way you want...it would only help in a failure of one ISP.

You need to use policy routing to achieve what you're looking for. However, it's important to note that you may black hole a subnet if that subnet's respective ISP fails without taking the link physically down. That may be fine with you, but just keep that in mind.

Here are some links that may help you:

https://kb.fortinet.com/kb/viewContent.do?externalId=FD31240

https://kb.fortinet.com/kb/documentLink.do?externalID=100116

https://help.fortinet.com/fos50hlp/54/Content/FortiOS/fortigate-advanced-routing-54/Routing_Advanced_Static/Policy_Routing.htm

- Daniel Hamilton