Dual WAN Configuration question

Forum|Forum|7 years ago
December 5, 2018
4 replies
4999 views

Afternoon all,

Here is what I want to achieve : I want to use wan1 for my remote branch user's network (internet access and establish VPN to HeadQuarters) I wan to use wan2 for a guest network internet access but I'd also like to use it as a redundant interface to wan1 (with all above's functionnality)

Is this even achievable ?

Any help would be appreciated

Thanks

JF

jgauthierAuthor

New Member

Forgot to mention that both wan connection providers are dynamic (dhcp -- pppoe)

:)

lobstercreed

New Member

Yes, this is a very common configuration. I would point you to this cookbook recipe for some step by step on the basics: https://cookbook.fortinet.com/redundant-internet-basic-failover-56/ Apply this as if your branch users were the only network that you cared about.

Note: you can use a Zone to simplify the configuration a bit by adding both WAN interfaces to an "Internet" zone.

https://cookbook.fortinet.com/using-zones-to-simplify-firewall-policies-56/

Then you would additionally need to set up a firewall policy to allow traffic from the guest network to the Internet, and add some policy routing to make sure the guest network could only go out the wan2 interface (under Network -> Policy Routes).

jgauthierAuthor

New Member

Thanks for the reply lobstercreed... this works perfectly IF my WAN interfaces are static IPs...

This is my issue actually... what if both those links are dynamic (one PPPoE and one DHCP in my case) ?

JF

Sign up

Login with SSO

Login to the community

Login with SSO