Skip to main content
Nark0t
Nark0t
New Member
September 27, 2019
Question

FortiWifi 50E WAN Fail over without load balancing

  • September 27, 2019
  • 1 reply
  • 4746 views

Hi,

I just want to get some advice, I currently have a FortiWifi 50E firewall in place with a fiber connection going into WAN1, however I will be installing a fail over fiber connection into WAN2, now what I want to find out is, I would like to use WAN 2 Exclusively as a fail over and not a load balance with fail over, would this be possible?

 

I had the idea of if I enable the SD-WAN feature, add my 2 WAN interfaces, but specify WAN1 with 100% traffic, and then if I setup link monitoring via the "Performance SLA" and setup SD-WAN Rules to fail over to WAN 2 based on the Performace SLA?

 

Am I incorrect in assuming that that will work?

 

Thanks in advance.

 

 

 

 

    1 reply

    Toshi_Esumi
    SuperUser
    Toshi_Esumi
    SuperUser
    September 27, 2019

    If you just want to set up a failover, we just had another discussion at below using "link-monitor":

    https://forum.fortinet.com/tm.aspx?tree=true&m=179124&mpage=1

     

    But I understand you want to set up SD-WAN. I'm actually relatively new to this feature mainly because it was quite painful to remove all direct references to those two individual circuits, which kept me away from it for more than a year.... So just take my comment as one of examples. Hopefully other experts would give you better suggestions.

    Anyway, how I'm using it for a failover is to set load balancing algorithm to "Volume". Then set the weight of the main circuit to 10 and backup to 0. Then set performance SLA on both sides. Probably only the main side needs it though.  

    neonbit
    neonbit
    New Member
    September 28, 2019

    I've configured the SD-WAN with the exact way you've said Nark0t and it works perfectly. Set the SLA as 100% packet loss only, and have WAN1 as the primary link and WAN2 as the secondary.

    Nark0t
    Nark0tAuthor
    New Member
    September 28, 2019

    neonbit wrote:

    I've configured the SD-WAN with the exact way you've said Nark0t and it works perfectly. Set the SLA as 100% packet loss only, and have WAN1 as the primary link and WAN2 as the secondary.

    Okay awesome, at least Im on the right track :), now my next dilemma is, once the fail over to WAN2 has taken place due to WAN1 doing down, the based on the Link Monitor SLA being set to 100% for WAN1 that in theory should switch the link from WAN2 fail over back to WAN1 as soon as the WAN1 link becomes available again?

    Terms & ConditionsAccessibility statement