Skip to main content
NotMine
Explorer III
August 9, 2014
Question

3 WAN ports + 3G connection?

  • August 9, 2014
  • 8 replies
  • 13305 views
Hello people, Can you please help me find a FortiGate device, preferably from the SMB line of products, that can support at least 3 WAN ports, plus a 3G connection? I' m not really familiar with this kind of equipment (a noob), so I don' t know what does, for example, mean when they say that a FortiGate-80CM has 6 configurable FE (well, I know what FE is :) ) ports. How does that differ from, say, 14 GE Switch Ports on a FortiGate-90D? Thanks!

    8 replies

    Carl_Wallmark
    New Member
    August 9, 2014
    Hi, and welcome. Almost every fortigate can support 3 wan and 3G. Also you now have the option of a fortiextender if running 5.2, its a 3G/4G modem connected via a ethernet cable. Its a matter of how many interfaces they have. The labels like wan, dmz etc.. are just to make it easy. A DMZ interface have the same settings as a wan interface. On the 90D you have 14 ports configured as a switch but they can be splitted into 14 interfaces like port1, port2.....port14.
    NotMine
    NotMineAuthor
    Explorer III
    August 9, 2014
    Hi Selective, thank you for your warm welcoming and answer. I was thinking to suggest a FortiWifi-60D-3G4G, as it has integrated support for 3G connection, and 10 ports will be more than enough for quite some time. The only thing that worries me now is mentioning of the " embedded 3G/4G/LTE wireless WAN modem for use on Verizon Wireless network" . Is it possible that this modem is limited only to Verizon? In the datasheet it says " The FortiGate/FortiWiFi-60D series includes a USB port that allows you to plug in a compatible 3rd party 3G/4G USB modem, providing additional WAN connectivity or a redundant link for maximum reliability." I believe that I could just plug in the 3G modem my mobile provider had given me, and configure the 3G connection?
    Carl_Wallmark
    New Member
    August 9, 2014
    You have 3 solutions: 1. use the FortiWifi 3G/4G - downside is that the firewall must be placed where you have a proper signal for the 3G network. 2. use a normal firewall with third party 3G/4G dongle - still the downside is as desbribed above 3. use a normal firewall with FortiExtender - the good thing here is that is connects with a Ethernet Cable, so the firewall can be placed in a basement while the modem is near a window or something. there are two models (actually Three) of the FortiExtender: One that is only a case where you put your third party 3G/4G modem. The other one have a built in modem which I beleive is locked to Verizon (not sure). But either way you choose, you can attach a 3G/4G modem. I have done some extensive configuration of third party 3G/4G modems in the past, so even if they are not on the supported list there is still a good chance you can get it to work. Please let me know if you need any help.
    NotMine
    NotMineAuthor
    Explorer III
    August 9, 2014
    Wow, you are just great! Thank you!!!
    emnoc
    New Member
    August 9, 2014
    4th option, you get a 3/4 usb-modem that has external antennae for inputs. I' ve had good lucks with huawei brands ( for GSM/GPRS/HSPA modes ) and would not spend the extra money for a integral usb-modem firewall imho. But that would be nice if you need a one-deal package. The cost of the external modem and upgrade options make it a better deal imho ( FWF60D+ an ext 3g modem ) You can find more here for possible candidates; http://www.3g-modem-wiki.com The fortiextender is nice, but in reality it' s very new and i would wait personally. I' m get one for testing by late oct and we are doing the same as you. A 1wan + 3g-backup solutions for possible remote monitoring stations and where cheap adsl is not reliable or maybe not even available. As far as the need for signal checks, you should use a cellaur phone in the place that you plan on placing the firewall=modem and check the signal level. You can do this via the # of bars or to be more technical by monitoring the RSSI ( a neg 70-80 or okay less is better )
    NotMine
    NotMineAuthor
    Explorer III
    August 9, 2014
    He he, that' s a good idea. :) But I don' t think the signal level will be the problem, the office is in very urban area. They have three optical WAN connections in the office, but also want 3G, " just in case everything else fails" . :) As I said, I' ll probably recommend the FortiWiFi-60-D, with an external USB 3G modem. Again, thank you! :)
    emnoc
    New Member
    August 9, 2014
    Here' s we we are doing or proposing for Africa & using A FWF60D+huawei maybe ZTE modem. It will most likely be scaled back to FGT60D model or even a 40model. http://socpuppet.blogspot.com/2014/05/dialup-around-cloud-with-huawei-and.html We plan on backing up ADSL where ever they have it, but in some areas the main uplink is 3G. As a matter of fact, I' m on 3G on a FWF60D for close to 5 months as my main gateway. Speeds are 2 -to- 4mbps download ( HSPA ), and maybe 256-384kbps uploads. I also used this same setup in the usa with T-Mo, and had good results using the huawei lineup modems. If I had a wan line like a ADSL, I could load all links and or use PBR to offer lower priority or none realtime data across the cell carrier network. I' m curious why 3x wan plus 3/4g uplinks? Do you have any metered/usage or fix-rate billing concerns?
    NotMine
    NotMineAuthor
    Explorer III
    August 9, 2014
    No, it' s just that the WAN links are dedicated, each for a special purpose (one for access to company' s Web services from the outside, one for office use and one for VPN connections). The 3G is just a backup. Those are the requests, amongst others. Who am I to judge? :) Thanks for the link!
    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.