Skip to main content
TSC_JEFF
TSC_JEFF
Visitor III
September 8, 2021
Question

WAN failover

  • September 8, 2021
  • 2 replies
  • 5962 views

I'd like to setup 2 WAN on a Fortigate but not as Active-Active but Active-Passive, so if ISP1 fails, it failover to ISP2 automatically.

I know Active-Active ispossible since you just needed to set policy-based routing to do this but not sure with ISP1 as primary and ISP2 as a backup that will failover automatically without switching the routing. Is this possible? 

 

    2 replies

    Toshi_Esumi
    SuperUser
    Toshi_Esumi
    SuperUser
    September 9, 2021

    SD-WAN is generally recommended unless some specific reasons not to use SD-WAN.

    https://docs.fortinet.com...t-internet-with-sd-wan

    It's for 6.0 because Google found it first, but should be similar doc for newer version.

     

    Only if you have particular reason not to, you can use two static default routes to each but change priority, then set up link-monitor against the primary circuit to remove the primary default route. But this is basically what SD-WAN would do.

    Jess07
    Jess07
    New Member
    September 13, 2021

    If you know that you have a combination of lost and slower connections, I'd go with #3. The load balance is also available. Usb modems (3G/4G,sim), also deserving of attention, generally any Mikrotik router you would be trying to do so with, can be used as a 3rd backup if it has a Usb slot. Just to be covered.

    TSC_JEFF
    TSC_JEFFAuthor
    Visitor III
    September 17, 2021

    Thanks for both inputs, I'll try the SD-WAN

    Terms & ConditionsAccessibility statement