Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
FortiAymen
New Contributor

SD WAN problem

Hi, i'm novic in Fortiworld i need your help...

 

i have tow internet connexions (WiMax and ADSL), so i activate Link Load Balancing feature (SD WAN) in FortiOS 5.6

Everything  is OK...

but, i want to redirect Exchange server traffic through WiMax link... how can i d it?

thank you in advance

4 REPLIES 4
Allan_Lago
New Contributor

Hello @FortiAymen,

 

If i understant you correctly you need to use a policy route.

 

Go to System > Feature Visibility and Active the Advance Routing feature.

 

Then you need to create a policy route, goto Network > Policy Route and then create a policy route to match your requirements.

 

You can also do it by the CLI with the following commands:

 

config router policy

    edit 0

        set input-device "internal1" #match this with your exchange server interface gateway

        set srcaddr "exchangeServer" #match this with your Exchange object in Fortigate

        set dstaddr all

        set output-device "WiMax" #The interfce rou want to route this traffic trought

        set gateway 0.0.0.0 #if you have more than 1 ip on this interface i strongly recommend you to use the ip you set as your reverse dns.

    end

 

http://help.fortinet.com/...tic/Policy_Routing.htm

 

I hope this can help you.

 

 

 

 

 

 

 

 

 

   Allan Lago

   Security Analist

   allan.lago@itsense.com.br

   +55 21 96436-1884

   +55 54 99100-0949

   https://itsense.com.br

Allan Lago Security Analist allan.lago@itsense.com.br +55 21 96436-1884 +55 54 99100-0949 https://itsense.com.br
MikePruett

Alago hit the nail on the head. Just policy route your exchange server to use the desired connection and you are on your way.

Mike Pruett Fortinet GURU | Fortinet Training Videos
Allan_Lago

Thank you @MikePruett. xD

 

 

 

   Allan Lago

   Security Analist

   allan.lago@itsense.com.br

   +55 21 96436-1884

   +55 54 99100-0949

   https://itsense.com.br

Allan Lago Security Analist allan.lago@itsense.com.br +55 21 96436-1884 +55 54 99100-0949 https://itsense.com.br
bashrael

Hi,

Would you get the same result by making a SDWan rule with the Exchange server as source, destination all, but as outgoing interface member only the WIMAX interface?

And if yes..whats the difference?

Thanks!

Labels
Top Kudoed Authors