Two simple scenarios with two WAN links

Hi,

you may want to have a look at this:

http://kb.fortinet.com/kb/documentLink.do?externalID=FD32103

which will explain which static route will be in the forwarding table depending on route priority and distance.

And also this may be useful:

http://help.fortinet.com/fos50hlp/52data/index.htm#FortiOS/fortigate-advanced-routing-52/Routing_Advanced_Static/adv_static_example.htm%3FTocPath%3DChapter%25203%2520-%2520Advanced%2520Routing%7CAdvanced%2520Static%2520Routing%7C_____6

For your first scenario:

You can do this by using policy based routing, which I would always try to avoid and Link Health Monitor (Router > Static > Settings)

The second one is a very classic scenario where you will need two default routes (same distance and prio) and ECMP as described in the handbook (second link).

Hope this helps you along...

Have fun and bye bye,

hallodri

Hi @przemo

First you need to add default routes - one for each wan link. Depending on whether you need incoming services on both wan links ( eg. 1:1 NAT, Port Forward ), you will need to have distance equal on both default routes; priority will determine preference for outbound traffic.  If you don't require incoming services on both links, set shorter distance for preferred link and/or link where general traffic will egress.

Use policy routing to bend specific egress traffic through particular link - eg.

wan1 - general traffic - distance 10 / priority 0

want2 - http/https - distance 20 / priority 0 - policy route: src net -> all, type: 6, port http/https, gateway wan2

... do not set a specific gateway address if fail-over is required ie. use 0.0.0.0

Otherwise use load-balancing with same distance, priority for both links

Create policies to allow traffic and assign security profiles

int -> wan1 -> all services

int -> wan2 -> http/https

Create ecmp entries for fail-over

Create fail-over policies in case of fail-over

Hope that helps ...

Robby