Skip to main content
ozzy1903
ozzy1903
New Member
April 5, 2019
Question

Wan link sharing in redundant SDWAN design

  • April 5, 2019
  • 1 reply
  • 3945 views

Hi All

 I am at initial phase of a SDWAN deployment. I will have dual FWs in branches. I can connect my internet connection as full mesh to my fortigates. However my mpls provider is proving only one physical connection with /30 subnet. So i can connect it only to one device. Can i do some magic to make fortigates to share my mpls link for sdwan?

    1 reply

    lobstercreed
    lobstercreed
    New Member
    April 5, 2019

    The only way I know of is to add a switch in between.  It does add a single point of failure but you're already looking at that with the provider's setup.  This is what we do, as our ISP's only give us one port each.

    mahesh_secure
    mahesh_secure
    New Member
    April 6, 2019

    Hi

     

    as mentioned by @lobstercreed 

     

    you need fortiswitch or any other l2 switch that support stacking.

     

    create a vlan in switch and add 3 port to that vlan in access mode. 

     

    example:

     

    port 1 

    port2

    port3

     

    in vlan 2 with access mode. connect MPLS to port 1 and from port 2 to 1st firewall and port3 to 2nd firewall

     

     

    Regards

    Mahesh

    ozzy1903
    ozzy1903Author
    New Member
    April 7, 2019

    But ISP is giving me /30. Will firewalls share the only one available IP?

    Terms & ConditionsAccessibility statement