Skip to main content
RolandBaumgaertner72
RolandBaumgaertner72
New Member
August 29, 2024
Solved

SD WAN Configuration for Failover

  • August 29, 2024
  • 2 replies
  • 1542 views

Hi,

 

we are in the middle of changing a FG300 cluster to a new FG200 cluster.

 

In the old config we didnt use SD WAN, we had like one WAN1 for the MPLS connections and WAN2 and WAN3 for Internet Access. WAN1 mainly has all VIPs and VPNs, also it is a shared Internet Access so thats why we got WAN3 for all outgoing traffic.

 

Now we would like SD WAN for Load Balancing or primary failover reasons but I am not sure what would be the correct configuration. If I do the implicit rule with 99%  - 1% or what is the best way?

 

Thanks for your suggestions!

Best answer by AEK

Hi Roland

Certainly SD-WAN is the best option to manage your WAN traffic.

I believe the good idea is first to read how it works and how it is configured.

You may start here:

https://docs.fortinet.com/document/fortigate/7.4.4/administration-guide/889544

Hope it helps

2 replies

AEK
SuperUser
AEKAnswer
SuperUser
August 29, 2024

Hi Roland

Certainly SD-WAN is the best option to manage your WAN traffic.

I believe the good idea is first to read how it works and how it is configured.

You may start here:

https://docs.fortinet.com/document/fortigate/7.4.4/administration-guide/889544

Hope it helps

AEK
RolandBaumgaertner72
RolandBaumgaertner72Author
New Member
August 29, 2024

Hi,

 

we are using SD WAN with other FGs but still have always kind of problems. I know this gate and we have experience with SD WAN.

 

This case is special since all branch offices connect via MPLS and use this gateway for internet.

 

Something like best use cases from users would be great, like to know what to do in what kind of case and that it works fine. Again, in our case it would be using WAN2 and WAN3 with failover, like 100% WAN3 and when WAN3 fails, move to WAN2.

 

Thanks

 

 

Terms & ConditionsAccessibility statement