New Member

Question

SIte To site VPN fail over not working

Forum|Forum|4 months ago
January 16, 2026
1 reply
206 views

I have created 1 Hub with 2 branch office ( No forti manager ) , HUB having 2 ISP with static IP , branch having 2 ISP with dialup. created tunnels and created aggrigate tunnel. but fail over not hapening. some time 1 tunnel will work. routing also not working. can anybody help for the best practice / document for the config

FortiGate

Explorer

Hi!

Make sure to use IP SLA to verify the working of the remote site.

If you're using BGP make sure multipath is enabled

I would recommend changing the aggregate IPsec to SD-WAN overlay make use of "Maximize bandwith"

New Member

Can you please share the link/doc for the configuration

Explorer

For SD-WAN?

Please follow this guide:

https://docs.fortinet.com/document/fortigate/7.0.0/sd-wan-sd-branch-deployment-guide/497384/defining-sd-wan-zones-for-the-overlay

Chapters:

Deployment procedures -> WAN edge -> Overlay -> Defining SD-WAN zones for the overlay

Deployment procedures -> WAN edge -> Overlay -> Defining SD-WAN members

Deployment procedures -> WAN edge -> WAN edge intelligence -> Defining performance SLA

Deployment procedures -> WAN edge -> WAN edge intelligence -> Creating SD-WAN rules.

Goodluck!