Skip to main content
kirit_patel
kirit_patel
New Member
October 19, 2019
Question

VPN failover

  • October 19, 2019
  • 1 reply
  • 2334 views
ALL     I have 2 fortigate with 2 tunnels at one end and 2 fortigates in remote end . What is the best method to failover tunnels ? how do u do it. ? so lets say on fortigate a i have 2 tunnels and remote fortigate b i have 2 tunnels . If one tunnel fails on fortigate a whats the best way to route traffic to tunnel b

    1 reply

    sw2090
    SuperUser
    sw2090
    SuperUser
    October 21, 2019

    I do it here by creating two tunnels to each FortiGate (since each hve at least two wan) conmnect to different wans.

    I then on both sides create the required policies.

    I then create two static routes with same distance and different priority to the remote subnets I want to access over the tunnels.

    That will do prio based routing. It will primaryly use the route with the lowest prio and if that is not available will use the routing with next higher prio.

    Works fine here.

    Terms & ConditionsAccessibility statement