Skip to main content
laffeg
laffeg
New Member
April 14, 2018
Question

ROUTE subnet to WAN2 help

  • April 14, 2018
  • 1 reply
  • 4660 views

hi

new to fortigate firewalls

have a client with 2 VDSL connections which i have setup and working on WAN1 and WAN2

not looking to use failover, but do need an ip range to go over WAN2, however traffic is still going out over the default "all traffic out" policy

i have IPV4 policy setup and sequenced above the "all traffic out"  

i have tried static and policy routes

can someone confirm what type of routes and policy i will need to get this working

thanks

    1 reply

    ede_pfau
    SuperUser
    ede_pfau
    SuperUser
    April 14, 2018

    hi,

     

    and welcome to the forums.

    First, you need 2 default routes which coexist at the same time. For that, configure each on wan1 and wan2 resp. with the same distance.

    Second, you need a policy route for wan2 traffic. Normal routes only look at the destination address whereas policy routes can take the source address, dest address or port number(s) to make the routing decision.

    And lastly, you need of course 2 policies to allow traffic out from wan1 and wan2.

     

    That's all. If it still doesn't work for you please provide the mentioned parts of the config here, and traceroutes or sniffing info for egress traffic.

    laffeg
    laffegAuthor
    New Member
    April 15, 2018

    hi

    got it working - i had been using the obtained/assigned public ip of WAN2 as the "gateway address" 

    as that is what WAN1 static route seemed to be set to 

     

    changed it to the address shown as "default gateway" in WAN2 details  and now it works

    ede_pfau
    SuperUser
    ede_pfau
    SuperUser
    April 23, 2018

    Yes, the default gateway is always "on the other side" of the WAN link, vulgo 'the next hop'.

    Terms & ConditionsAccessibility statement