Skip to main content
gilfalko
New Member
July 20, 2016
Question

Routing specific DSCP tagged packets

  • July 20, 2016
  • 1 reply
  • 6052 views

Hi

 

My situation is like this:

I have 3 WAN connections and a remote site with a single WAN connection.

I'd like to monitor the latency to the remote site using all 3 WAN links and from a single address (our Opsview server).

I know I can tag the outgoing packets using DSCP. 

My question is now, can I use 3 different tags in order to tell the Fortigate unit to route each through a different WAN connection?

 

Thanks

Gil

    1 reply

    emnoc
    New Member
    July 20, 2016

    Don't know of any firewall that routes via DSCP tags.  Don't even think that's an option in a router AFAIK

     

    gilfalko
    gilfalkoAuthor
    New Member
    July 20, 2016

    I actually think it does exist...

     

    There's a TOS pattern for making PBRs.

    Everything with the default of 0 gets picked up usualy.

    If I change it I might get what I want...

     

    ede_pfau
    SuperUser
    SuperUser
    July 20, 2016

    I don't think you'd even need to set the DSCP flag. Just use PBR with the source address as criterion (/32), in combination with the destination target address.