SSL FortiClient VPN Configuration on Multiple ISPs with FortiGate 200F

Forum|Forum|1 year ago
October 23, 2024
3 replies
2334 views

I’m currently working with a FortiGate 200F that has two interfaces configured with public IPs, each connected to a different ISP. One of the interfaces (ISP-1) has an SSL FortiClient VPN activated for remote work users, and this interface is also set as the default route for the FortiGate.

Now, I would like to activate SSL FortiClient VPN on the second interface (ISP-2) while keeping the default route to ISP-1.

Could anyone provide guidance on how to configure the FortiGate to allow SSL VPN access through ISP-2 without changing the default route?

What would be the best practices for setting this up?

Thank you for your assistance!

AlexC-FTNT

Staff

Probably the only option is to use ECMP and have a static route with same metric for ISP2. Surely, the "other" outgoing traffic will not pass only over ISP1 (possibly SDWAN can achieve similar outcome)

F-ALIAuthor

Explorer II

Thank you so much, @AlexC-FTNT , for your valuable support! I truly appreciate your help.
I’ll be looking into the topic on ECMP and SD-WAN.

F-ALIAuthor

Explorer II

Hi @Jean-Philippe_P

I'm currently working with a FortiGate 200F that has two interfaces configured with public IPs, each connected to a different ISP.
One interface (ISP-1) is configured with an SSL FortiClient VPN for remote users and is set as the default route for the FortiGate.

I would like to activate the SSL FortiClient VPN on the second interface (ISP-2) while keeping the default route through ISP-1.

In short, I want to enable SSL FortiClient VPN on both ISPs, but keep the default route on ISP-1.

thanks for your interested

Sign up

Login with SSO

Login to the community

Login with SSO