Skip to main content
fred339
Explorer III
November 9, 2022
Question

PING Through an SD-WAN Fortigate with 2 ISPs.

Fortigate 80F 6.4.10 with 2 WAN interfaces into an SD-WAN.

WANs are set up to switch to "secondary" if "primary" is down .. and back to "primary" when it is up.

I want to set up a PC to continuously ping (with a script) and traceroute out through each ISP.  So, a separate target destination for each WAN.

I've not gotten this to work yet.  I've been trying with the FG CLI.

wan1 is primary and active; wan2 is secondary and not active

exec ping-option source [wan2 IP]

exec ping-options interface wan2

But, pings don't work with this....

And, separately, setting traceroute-options

exec traceroute-options source [wan2 IP]

exec traceroute 8.8.8.8

yields the wan2 IP hop and no more....

 

 

3 replies

sidewaysguy14
Staff
Staff
November 9, 2022

In general, you should be able to do this by creating the address objects for the computer and public IPs.  Then use SD-WAN rules to manually send the traffic from Computer --> ISP1 destination through WAN1 and Computer --> ISP2 destination through WAN2.  

 

I'd recommend having a look at the Performance SLA documentation, as for the ping check you could configure an SLA monitor for the specific interface and destination. https://docs.fortinet.com/document/fortigate/7.2.2/administration-guide/584396/performance-sla 

fred339
fred339Author
Explorer III
November 12, 2022

@sidewaysguy14: Thank you!

sidewaysguy14
Staff
Staff
November 12, 2022

Anytime @fred339  :)

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT