Configure Backup-VPN for MPLS-Connection

[marcy]

Hello,

i've one Headquarter (HQ) and several Branch Offices (BO). The HQ and the BO's are connected via ISP MPLS Link each other.

So on every BO and the HQ are one FortiGate and the MPLS-Router from the ISP.

The MPLS-Router are connected on WAN2 via Static Route.

So, i've configured a ipsec VPN between the HQ and each BO for link failure on the MPLS-Network.

Next i've configured the Link Health Monitor on the FortiGate in BO. But when i disconnect the WAN-Link from the MPLS-Router, the Routing is updated on the BO FortiGate but not on the HQ. So i cannot not ping a Server or use the VPN Connection.

What is the configuration Mistake?

[ddskier]

Just thinking out loud, could you use routing protocols like OSPF to monitor which link to use?

[marcy]

No OSPF possible.

Only static routes!