FortiGate Static Route Priority

Forum|Forum|3 years ago
November 9, 2022
2 replies
5081 views

Hi,

If the FortiGate has 2 default route but with different priority like below:

config router static

edit 1

set device wan1

set gateway 192.168.208.29

set priority 10

set device wan1

set gateway 192.168.208.30

set priority 20

Without the link-monitor configuration, can FortiGate failover to static route #2 when the static route #1 is unreachable?

Thanks

Arie

FortiGate

Best answer by Toshi_Esumi

In your setting, both GWs are from the same vendor/ISP on wan1 interface. And it's providing the vendors GW redundancy in case the primary GW device goes down. (I'm assuming those GW devices are not yours.)

Link-monitor can take away static routes only per interface so it wouldn't work if both are on the same wan1.

To me you have to have a routing protocol set up with those two GW devices/neighbors to control the default routes. With static default routes, only thing you can do is when you noticed lost internet you would have to remove the primary default route manually.

Toshi

gfleming

Staff

No. In this scenario all you can really do is use policy routes to manually steer traffic over the second link.

https://docs.fortinet.com/document/fortigate/7.2.2/administration-guide/360563/dual-internet-connections

Toshi_EsumiAnswer

SuperUser

In your setting, both GWs are from the same vendor/ISP on wan1 interface. And it's providing the vendors GW redundancy in case the primary GW device goes down. (I'm assuming those GW devices are not yours.)

Link-monitor can take away static routes only per interface so it wouldn't work if both are on the same wan1.

To me you have to have a routing protocol set up with those two GW devices/neighbors to control the default routes. With static default routes, only thing you can do is when you noticed lost internet you would have to remove the primary default route manually.

Toshi

Sign up

Login with SSO

Login to the community

Login with SSO