This forum is for all security enthusiasts to discuss Fortinet's latest & evolving technologies and to connect & network with peers in the cybersecurity hemisphere. Share and learn on a broad range of topics like best practices, use cases, integrations and more. For support specific questions/resources, please visit the Support Forum or the Knowledge Base.
Hi Friends,
I want to use my fortigate 600c as link load balancer that when my clients connect to my fortigate, the box connects to the application server in round robin
and when 1 isp gets down box automatically transfer loads to another ISP. I have 2 ISP presently and have my domain at godaddy and will create A records of
my 2 isp ip configured at box
e.g., ISP 1 = 1.1.1.2 = A record = lb1.xyz.com and
ISP 2 = 2.2.2.2 = A record = lb2.xyz.com and
test.xyz.com = ns record = lb1.xyz.com
test.xyz.com = ns record = lb2.xyz.com
when 1 gets down it automatically routes to another isp, i mean when client nslookup test.xyz.com he'll get 2 ip 1.1.1.2 and 2.2.2.2
and in case ISP 1 gets down he will get only one result of ISP2 i.e., 2.2.2.2. its possible when my box acts as name server where
i can configure my domain name test.xyz.com with ip of both isp defined
These ip under domain name test.xyz.com which routed to application server and UTM IP can be different.
Then accordingly VIP configured on FGT to route to that servers private IP.
My purpose is to serve my clients if he gets only one isp responding then it connects through that and not unnecessarily gets a failed response from the failed ISP.
Thanks
Rohit
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.