Ensuring VPN redundancy

Hi,

I assume that each DNS entry resolves in a different IP ?

If so, on the FGT itself do you have two static routes for 0.0.0.0/0 or a sdwan config ?

L.E. under ssl vpn settings, you have both IPs listed under listening on interface ?

hmm, not sure about multiple remote gateways from different devices how and if it would/should work, only multiple links on the same device.

for this scenario i guess

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-enable-SSL-VPN-Access-for-two-different/ta-p/192904

https://community.fortinet.com/t5/FortiGate/Technical-Tip-SSL-VPN-Redundancy/ta-p/189668?externalID=FD46628

what you are trying to do in your case might work and maybe something else is not working/configured as it should on both devices

Hi @Alex2000,

I tested in my lab and it worked. Are you able to resolve the second FQDN from the client? Can you run packet sniffer on the second FortiGate to see if it receives the traffic or not. 

di sniffer packet any 'port 10443' 4 0 l

Regards, 

You got it wrong again. These are completely different devices. They are located in different countries. But both of them perform the same function - access to the company’s corporate resources. You can connect to any of them and get a home connection to the company’s intranet. I want to indicate them in a list, so that if one device does not respond (broken), the second one responds and gives a connection. But the Forty client does not attempt to connect to the second server in the list.

in one case there is only one server in the list that responds well. In another case, I move the same server second in the list. And the first one I register is a obviously non-existent IP. The connection will go on forever to the first one in the list, and there will be no attempt on the second one