Skip to main content
takarl2
Explorer
June 3, 2025
Solved

Virtual WAN under phsyical WAN port

  • June 3, 2025
  • 3 replies
  • 579 views

I'm very new to networking, and I'm a bit over my head. The current situation is we have two firewalls (Firewall 1 and Firewall 2) and two different WANs (VDOM Prod = 1.2.3.4/32, VDOM Nonprod =5.6.7.8/32) on physical ports on Firewall 1. There are no WAN connections are Firewall 2, so when there's a failover, we lose connection to the outside.  

My end goal is to have a physical port on each that can support both VDOM WANs without adding more physical WAN drops to the greater network. 

So, here is my concept:
Firewall 1:
Physical Port-1 1.2.3.4/32 (Prod VDOM)
   VLAN 5.6.7.8/32 (NonProd VDOM)

Firewall 2
Physical Port 2 5.6.7.8/32 (NonProd VDOM)
   VLAN 1.2.3.4/32 (Prod VDOM)

Is this a feasible solution? Should I make the connection identical?  

Thank you for your time. 

Best answer by funkylicious

hi,

are the firewalls connected in a cluster/ha configuration?

if so, they would need to have identical physical connection, meaning port1 and port2 from FW-2 should have a similar connection as port1 and port2 from FW-1, in a switch either a stack/vpc or a single unit switch .

3 replies

Anthony_E
Staff
Staff
June 6, 2025

Hello,


Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.


Thanks,

Best Regards
Anthony_E
Staff
Staff
June 9, 2025

Hello,

We are still looking for someone to help you.

We will come back to you ASAP.


Thanks,

Best Regards
funkylicious
SuperUser
SuperUser
June 9, 2025

hi,

are the firewalls connected in a cluster/ha configuration?

if so, they would need to have identical physical connection, meaning port1 and port2 from FW-2 should have a similar connection as port1 and port2 from FW-1, in a switch either a stack/vpc or a single unit switch .

"jack of all trades, master of none"
Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!