FortiGate FGT60 connected to:
- ISP1 with dual failover active/standby router (VeloCloud) - single Static IP/Gw - 2 Eth port
- ISP2 with PPPoE connection
- ISP3 with PPPoE connection
I've started to configure SD-Wan to manage fails and load balancing,
but cannot add the redundant interface to the zone: it does not appear in GUI
Need to be managed/added via CLI ?
---------------------------------------------------------------------------
Actually configuration:
ISP1:
config system interface
edit "ISP1"
set vdom "root"
set ip xx.xx.xx.xx 255.255.255.248
set allowaccess ping https http fgfm fabric speed-test
set type redundant
set member "wan2" "wan1"
set lldp-reception enable
set lldp-transmission enable
set estimated-upstream-bandwidth 10000
set estimated-downstream-bandwidth 10000
set monitor-bandwidth enable
set role wan
set snmp-index 18
next
end
ISP2:
config system interface
edit "dmz"
set vdom "root"
set mode pppoe
set distance 20
set allowaccess ping https http
set vlanforward enable
set type physical
set alias "ISP2"
set lldp-reception enable
set estimated-upstream-bandwidth 5000
set estimated-downstream-bandwidth 5000
set monitor-bandwidth enable
set role wan
set snmp-index 3
set username "xxxxxxx"
set password ENC xxxxxxxxxxx
next
end
ISP3:
config system interface
edit "internal7"
set vdom "root"
set mode pppoe
set distance 30
set type physical
set alias "ISP3"
set lldp-reception enable
set estimated-upstream-bandwidth 1000
set estimated-downstream-bandwidth 1000
set role wan
set snmp-index 15
set username "xxxxxxxx"
set password ENC xxxxxxxxxxxxxxxxx
next
end
SD-WAN Config:
config system sdwan
set status enable
config zone
edit "SDWan-Zone"
next
end
config members
edit 1
set interface "dmz"
set zone "SDWan-Zone"
next
edit 2
set interface "internal7"
set zone "SDWan-Zone"
next
end
config health-check
edit "SLA_Ping"
set server "8.8.8.8" "1.1.1.1"
set members 0
next
end
end
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
You need to add those interfaces to SD-WAN members and then you can add them to zone.
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1688 | |
1087 | |
752 | |
446 | |
228 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.