SD WAN and NAT

Forum|Forum|3 years ago
April 25, 2023
2 replies
2099 views

If I have a Fortigate 60F with 2 ISPs setup as an SD WAN interface, how do I setup inbound NAT so that it works with the failover ISP? For instance, I have several VIPs and inbound NATs currently tied to the primary ISP public IP address. Now I have a 2nd ISP, what happens to the ability to connect into the network if the primary ISP goes down?

FortiGate

gfleming

Staff

Create two VIPs, one for each wan interface. Note you won't be using SD-WAN to determine how outside clients connect to you. You'll need some form of mechanism so clients know not to connect to your dead ISP. DNS failover is one method of doing this where you use external health checks to dynamically update your DNS pointers...