Skip to main content
RicardoReyes
RicardoReyes
New Member
December 28, 2023
Solved

SDWAN remote administrative access via HTTPS

  • December 28, 2023
  • 3 replies
  • 2928 views

Hi,

 

Im currently working with a Fortigate, which has 2 ISP's working on and SD-WAN, ports being used are Wan1 and Wan2. The rule I have setup is that Wan1 is prefered over Wan2, Wan1 has better bandwith and Wan2 is used as a backup.

 

I need to have admin access via Wan2 with https (Wan2 works with a private ISP so the public IP is safe from outside intrusion). I have already configured Wan2 with the Admin access with https enabled and have confirmed with a remote user that the connection works, but it only works if Wan1 is down. If Wan1 is up the remote user can still ping the Wan2 address, but is not able to enter the GUI via https.

 

What config could I be missing for this setup to work?

 

Thanks

Best answer by hbac

Hi @RicardoReyes,

 

Please make sure that both wan2 has an active default route. You can run this command "get router info routing-table all". 

 

Regards, 

3 replies

funkylicious
SuperUser
funkylicious
SuperUser
December 28, 2023

Hi, try the following setting under wan2, although it mostly helps for SSLVPN.

Can you run a diag debug flow while wan1 is UP and you try to connect to wan2, maybe something that  could indicate the problem appears?

 

config system interface     edit portX         set preserve-session-route enable      end

 

  

"jack of all trades, master of none"
hbac
Staff
hbacAnswer
Staff
December 29, 2023

Hi @RicardoReyes,

 

Please make sure that both wan2 has an active default route. You can run this command "get router info routing-table all". 

 

Regards, 

Matager
Matager
Visitor III
January 4, 2024

simply create a default route for WAN2

Terms & ConditionsAccessibility statement