Help
FortiClient
FortiClient proactively defends against advanced attacks. Its tight integration with the Security Fabric enables policy-based automation to contain threats and control outbreaks. FortiClient is compatible with Fabric-Ready partners to further strengthen enterprises’ security posture.
carabhavi
Staff
Staff

Created on ‎04-20-2020 10:14 AM Edited on ‎07-21-2025 06:32 AM By Moderator

Article Id 195957

Technical Tip: Multiple gateway IP for FortiClient

Description

 

This article describes how to configure multiple gateway IPs for the SSL VPN or IPsec Dial Up VPN, so that if one WAN link is down, still user can still connect to the VPN via the secondary gateway IP without the user changing the gateway IP manually.

 

Scope

 

FortiClient.

Solution


Refer to the image below:

 
By option '+ Add Remote Gateway', adding multiple gateway IPs is possible.
 
FortiClient uses the gateway IP, which has fewer hops from the ping reply as primary, and if the ping is disabled on the interface, then it will be a random selection.

Related document:
Selecting closest gateway for VPN connection 
12442
Suggest New Article
Article Feedback
Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Social Media
Security Research
Company
News & Articles
Contact Us

Copyright 2025 Fortinet, Inc. All Rights Reserved.