Fortigate 60D - issue with Wan2

Hello All,

I have done several tests and it seems that the problem is only with the WAN2. The same connection configured on WAN1 works, on WAN2 it doesn't.

It would appear that WAN2 is disabled in some way.
I have already made a hard reset of the device and it does not solve the problem.

Any idea?

Hey Jerax,

what does your routing look like?

Just because load-balancing is configured doesn't mean FGT will automatically use both links (equally or at all).

I would start with this:
#get router info routing-table all

-> that should provide some info as to what your routing looks like and the default route looks like

-> if you only see wan1, then FGT doesn't have a default route via wan2 and won't use it

Hi Team,

I will suggest you to take packet capture at next hop to isolate the issue.

If the request is reaching the router then it could be isp issue.

Also, share us the output of these commands:

diag hardware deviceinfo nic wan2

get sys performance status

Thanks everyone for the reply.

So I'm sure the problem is not ISP side because I tried to configure the WAN1 with the parameters of the WAN2 and it worked without problems and I also tried to configure the interface WAN2 with the parameters of the WAN1, and as I assumed the Wan2 doesn't work.

and before you ask me I removed the Load balance and tried to configure the interfaces individually, from the WAN2 I can not surf the Internet with any configuration. In wan1, same configuration everything works.

"Just because load balancing is configured doesn't mean FGT will automatically use both links (equally or at all)."
I understand this point, but if I put the WAN1 interface in "administrative sleep mode", the interface 2 has to start working, otherwise I think there is no point in doing a load balancing.

hm did you configure some health check for your loadbalancer? It needs that to detect a non functional internet connection and remove its route.

without the wan goes down but the route stays so 50% packets still go to it...

did you enable the "Update static route" option in there?

on a 100F with FortiOS 6.4.9 I see it in Network->Performance SLA

when I edit a healthcheck in there i see this option at the very bottom.

uh ya I should've read your inital post more careful :D

you are on FOS 5.2 on your 60D. 

Maybe that didn't exist there since 5.2 was before sd-wan came afair.

Unfortunately with that I am out of this atm...

Hello, kind of late, I had the same issue, what I did is: Go to...

under IPv4Policy create a new policy

Copy the values below:

Save and hopefully, that will solve your problem.