How to config multiple wan routing to FortiGate ?

Forum|Forum|1 year ago
July 29, 2024
1 reply
3456 views

I am setting up an office network with a FortiGate 80F (FortiOS 7.2) and am having trouble with routing. Can anyone please tell me how to configure multiple wan routing?

My scenario includes the following Vlan interfaces (LAG with switch):

- wan1: 1.1.1.1
- wan2: 2.2.2.2
- wan3: 3.3.3.3

- lan1: 192.168.1.0/24
- lan2: 192.168.2.0/24
- lan3: 192.168.3.0/24
- lan4: 192.168.4.0/24

Goals:

1. When lans connect to the internet:
- lan1 → wan1
- lan2 → wan2
- lan3 → wan3
- lan4 → wan3

2. Automatically change to the following priority routing if issues occur:
- lan1: wan1 → wan2 → wan3
- lan2: wan2 → wan3 → wan1
- lan3: wan3 → wan1 → wan2
- lan4: wan3 → wan1 → wan2

My config:

AEK

SuperUser

SD-WAN is the best way to do that and the modern way to manage you WAN links.

You can start here:

https://docs.fortinet.com/document/fortigate/7.4.4/administration-guide/889544/sd-wan-quick-start

AEK

ntluan56Author

Explorer II

Thank you for your advice.
I am working with the SD-WAN configuration and have some questions:

1. In the document linked below, I see only one internal network. In my case, how can I set up multiple internal networks? I guess this would be covered under [Configuring firewall policies for SD-WAN].

[SD-WAN Quick Start Guide](https://docs.fortinet.com/document/fortigate/7.4.4/administration-guide/889544/sd-wan-quick-start)

2. I uploaded my configuration (not using SD-WAN), and it can route traffic through each WAN, but it does not automatically change routes when I shut down a WAN link (from the upstream switch).

Is there something I missed to enable the automatic route change mechanism, or do I need to use SD-WAN as required to implement this?

Sign up

Login with SSO

Login to the community

Login with SSO