Skip to main content
ColdFyre22
ColdFyre22
New Member
March 5, 2020
Question

ADVPN and SDWAN configuration

  • March 5, 2020
  • 2 replies
  • 4543 views

Good Afternoon Everyone,

 

The 6.2.3 cookbook gives a configuration example of how to setup an ADVPN/SDWAN configuration with 2 ISP's at each spoke and 2 ISP's at HQ, but with 2 separate FortiGates.

 

https://docs.fortinet.com/document/fortigate/6.2.3/cookbook/985659/advpn-and-shortcut-paths

 

How can I achieve this with 1 HUB Fortigate with both ISPs connected to it? We use our FortiGates as the default gateway for our client machines at both HQ Hub and at the Branch spokes. 

 

In addition that example does not use SDWAN on the HUB, we would like to use SDWAN on the HUB fortigate so that the users working at HQ local to the hub have redundant internet conenctivity if one of the ISP's goes down.

 

Any help is appreciated. Its not too hard to find information about SDWAN or ADVPN, but it's hard to find information or people well versed in SDWAN *AND* ADVPN.

 

    2 replies

    ernest_louie
    ernest_louie
    New Member
    March 10, 2020

    If I understand your question, you want to run 2-ISPs to as single Fortigate in an SD-WAN design.  If so, here is a youtube link  on FortiGate Cookbook - Redundant Internet with SD-WAN (5.6) that should help:

     

    https://www.youtube.com/watch?v=SV9YrpG_li8&t=2s

    Hope this helps.

    ColdFyre22
    ColdFyre22Author
    New Member
    March 11, 2020

    Ernest,

     

    I'm running 2 ISP's on a single HUB, and 2 ISPs on each of my spokes. Both the hub and the spokes need to be ADVPN and SDWAN. 

    ernest_louie
    ernest_louie
    New Member
    March 12, 2020

    I'm sorry, but wanted to understand your network a little more before making any suggestions.  I have quickly drawn a diagram, but maybe you have one that you can share without any of your public IP addresses.  Let me know what you have or is the diagram(attached) good enough.

    Terms & ConditionsAccessibility statement