Skip to main content
gilfalko
New Member
July 20, 2016
Question

Routing specific DSCP tagged packets

  • July 20, 2016
  • 6 replies
  • 6071 views

Hi

 

My situation is like this:

I have 3 WAN connections and a remote site with a single WAN connection.

I'd like to monitor the latency to the remote site using all 3 WAN links and from a single address (our Opsview server).

I know I can tag the outgoing packets using DSCP. 

My question is now, can I use 3 different tags in order to tell the Fortigate unit to route each through a different WAN connection?

 

Thanks

Gil

    6 replies

    emnoc
    New Member
    July 20, 2016

    Don't know of any firewall that routes via DSCP tags.  Don't even think that's an option in a router AFAIK

     

    gilfalko
    gilfalkoAuthor
    New Member
    July 20, 2016

    I actually think it does exist...

     

    There's a TOS pattern for making PBRs.

    Everything with the default of 0 gets picked up usualy.

    If I change it I might get what I want...

     

    ede_pfau
    SuperUser
    SuperUser
    July 20, 2016

    I don't think you'd even need to set the DSCP flag. Just use PBR with the source address as criterion (/32), in combination with the destination target address.

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.