Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
NotMine
Contributor II

3 WAN ports + 3G connection?

Hello people, Can you please help me find a FortiGate device, preferably from the SMB line of products, that can support at least 3 WAN ports, plus a 3G connection? I' m not really familiar with this kind of equipment (a noob), so I don' t know what does, for example, mean when they say that a FortiGate-80CM has 6 configurable FE (well, I know what FE is :) ) ports. How does that differ from, say, 14 GE Switch Ports on a FortiGate-90D? Thanks!

NSE 7

All oppinions/statements written here are my own.

NSE 7 All oppinions/statements written here are my own.
8 REPLIES 8
Carl_Wallmark
Valued Contributor

Hi, and welcome. Almost every fortigate can support 3 wan and 3G. Also you now have the option of a fortiextender if running 5.2, its a 3G/4G modem connected via a ethernet cable. Its a matter of how many interfaces they have. The labels like wan, dmz etc.. are just to make it easy. A DMZ interface have the same settings as a wan interface. On the 90D you have 14 ports configured as a switch but they can be splitted into 14 interfaces like port1, port2.....port14.

FCNSA, FCNSP
---
FortiGate 200A/B, 224B, 110C, 100A/D, 80C/CM/Voice, 60B/C/CX/D, 50B, 40C, 30B
FortiAnalyzer 100B, 100C
FortiMail 100,100C
FortiManager VM
FortiAuthenticator VM
FortiToken
FortiAP 220B/221B, 11C

FCNSA, FCNSP---FortiGate 200A/B, 224B, 110C, 100A/D, 80C/CM/Voice, 60B/C/CX/D, 50B, 40C, 30BFortiAnalyzer 100B, 100CFortiMail 100,100CFortiManager VMFortiAuthenticator VMFortiTokenFortiAP 220B/221B, 11C
NotMine
Contributor II

Hi Selective, thank you for your warm welcoming and answer. I was thinking to suggest a FortiWifi-60D-3G4G, as it has integrated support for 3G connection, and 10 ports will be more than enough for quite some time. The only thing that worries me now is mentioning of the " embedded 3G/4G/LTE wireless WAN modem for use on Verizon Wireless network" . Is it possible that this modem is limited only to Verizon? In the datasheet it says " The FortiGate/FortiWiFi-60D series includes a USB port that allows you to plug in a compatible 3rd party 3G/4G USB modem, providing additional WAN connectivity or a redundant link for maximum reliability." I believe that I could just plug in the 3G modem my mobile provider had given me, and configure the 3G connection?

NSE 7

All oppinions/statements written here are my own.

NSE 7 All oppinions/statements written here are my own.
Carl_Wallmark
Valued Contributor

You have 3 solutions: 1. use the FortiWifi 3G/4G - downside is that the firewall must be placed where you have a proper signal for the 3G network. 2. use a normal firewall with third party 3G/4G dongle - still the downside is as desbribed above 3. use a normal firewall with FortiExtender - the good thing here is that is connects with a Ethernet Cable, so the firewall can be placed in a basement while the modem is near a window or something. there are two models (actually Three) of the FortiExtender: One that is only a case where you put your third party 3G/4G modem. The other one have a built in modem which I beleive is locked to Verizon (not sure). But either way you choose, you can attach a 3G/4G modem. I have done some extensive configuration of third party 3G/4G modems in the past, so even if they are not on the supported list there is still a good chance you can get it to work. Please let me know if you need any help.

FCNSA, FCNSP
---
FortiGate 200A/B, 224B, 110C, 100A/D, 80C/CM/Voice, 60B/C/CX/D, 50B, 40C, 30B
FortiAnalyzer 100B, 100C
FortiMail 100,100C
FortiManager VM
FortiAuthenticator VM
FortiToken
FortiAP 220B/221B, 11C

FCNSA, FCNSP---FortiGate 200A/B, 224B, 110C, 100A/D, 80C/CM/Voice, 60B/C/CX/D, 50B, 40C, 30BFortiAnalyzer 100B, 100CFortiMail 100,100CFortiManager VMFortiAuthenticator VMFortiTokenFortiAP 220B/221B, 11C
NotMine
Contributor II

Wow, you are just great! Thank you!!!

NSE 7

All oppinions/statements written here are my own.

NSE 7 All oppinions/statements written here are my own.
emnoc
Esteemed Contributor III

4th option, you get a 3/4 usb-modem that has external antennae for inputs. I' ve had good lucks with huawei brands ( for GSM/GPRS/HSPA modes ) and would not spend the extra money for a integral usb-modem firewall imho. But that would be nice if you need a one-deal package. The cost of the external modem and upgrade options make it a better deal imho ( FWF60D+ an ext 3g modem ) You can find more here for possible candidates; http://www.3g-modem-wiki.com The fortiextender is nice, but in reality it' s very new and i would wait personally. I' m get one for testing by late oct and we are doing the same as you. A 1wan + 3g-backup solutions for possible remote monitoring stations and where cheap adsl is not reliable or maybe not even available. As far as the need for signal checks, you should use a cellaur phone in the place that you plan on placing the firewall=modem and check the signal level. You can do this via the # of bars or to be more technical by monitoring the RSSI ( a neg 70-80 or okay less is better )

PCNSE 

NSE 

StrongSwan  

PCNSE NSE StrongSwan
NotMine
Contributor II

He he, that' s a good idea. :) But I don' t think the signal level will be the problem, the office is in very urban area. They have three optical WAN connections in the office, but also want 3G, " just in case everything else fails" . :) As I said, I' ll probably recommend the FortiWiFi-60-D, with an external USB 3G modem. Again, thank you! :)

NSE 7

All oppinions/statements written here are my own.

NSE 7 All oppinions/statements written here are my own.
emnoc
Esteemed Contributor III

Here' s we we are doing or proposing for Africa & using A FWF60D+huawei maybe ZTE modem. It will most likely be scaled back to FGT60D model or even a 40model. http://socpuppet.blogspot.com/2014/05/dialup-around-cloud-with-huawei-and.html We plan on backing up ADSL where ever they have it, but in some areas the main uplink is 3G. As a matter of fact, I' m on 3G on a FWF60D for close to 5 months as my main gateway. Speeds are 2 -to- 4mbps download ( HSPA ), and maybe 256-384kbps uploads. I also used this same setup in the usa with T-Mo, and had good results using the huawei lineup modems. If I had a wan line like a ADSL, I could load all links and or use PBR to offer lower priority or none realtime data across the cell carrier network. I' m curious why 3x wan plus 3/4g uplinks? Do you have any metered/usage or fix-rate billing concerns?

PCNSE 

NSE 

StrongSwan  

PCNSE NSE StrongSwan
NotMine
Contributor II

No, it' s just that the WAN links are dedicated, each for a special purpose (one for access to company' s Web services from the outside, one for office use and one for VPN connections). The 3G is just a backup. Those are the requests, amongst others. Who am I to judge? :) Thanks for the link!

NSE 7

All oppinions/statements written here are my own.

NSE 7 All oppinions/statements written here are my own.
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors