FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
This article describe the best practice of configure FortiDDNS for multiple internet service provider(ISP) links.
Scope
FortiDDNS.
Solution
For example, customer would like to register abc.fortiddns.com to mutiple isp IP addresses configure on wan1 and wan2, when wan1 IP is down, wan2 IP is able to override and register as main IP address of abc.fortiddns.com.
# config system ddn edit 1 set ddns-server FortiGuardDDNS set ddns-domain "abc.fortiddns.com" set monitor-interface "wan1" "wan2" end
But this configuration is not the best practice because FortiDDNS server has interval time to update the ip registration, and priority of the IP addresses cannot be configured in FortiDDNS , it is necessary to call Fortinet Technical Assistance Center to reset the registration for wan2 ip to override wan1 IP.
In other words, it is recommended to customer to use different domain for different isp links.
