multiple VPN as failover mpls

Forum|Forum|4 years ago
November 17, 2021
4 replies
3598 views

Hi, im migrating a site from cisco to fortinet (FG-80f), and one thing the cisco provider couldnt do was creating multiple failover vpns in case the MPLS link went down.

the MPLS is connecting 6 locations, with differents internal ips (e.g : each site has 10.x.0.0/16). All is routed by static routes configured in every site. 10.0.0.0 /8 is being routed by MPLS. What I want to do is that when the mpls link of a site goes down, the VPN starts routing that network. I was thinking of using de sdwan for this, and making a simple redundant WAN conection by static routes. Whats the best way to achieve this?

thanks

FortiGate

Yurisk

SuperUser

1) For SD-WAN to consider, all links are supposed to terminate on Fortigate(s) , is it the case, or there is a MPLS router of a sort?
2) The next question is - how do you plan on detecting MPLS link failure ?

yurisk.info - all things Fortinet blog, no ads

MannazAuthor

New Member

we have a ISP MPLS router, and our FG, wich is part of the mpls network.

was thinking of doing SDWAN link health checks to monitor MPLS link failure

Troubleshooter_73

Explorer

Thats what SDWAN on Fortigate is made for. You can combine any type of Interface to a logical SDWAN Interface. Assuming you are famliar with SDWAN you should try to combine your MPLS interface with your IPSec Interface and configure the WAN Link failover by using health checks, so something like this...

https://docs.fortinet.com/document/fortigate/6.4.7/administration-guide/580649/link-health-monitor

MannazAuthor

New Member

yeah, this is what i was thinking of doing. Wanted to know if i was forgetting some other method . thanks

Sign up

Login with SSO

Login to the community

Login with SSO