Default routes and WAN Load Balancing

[NotMine]

Hello everyone,

Can someone explain to me why I can't add two default static routes with the destination 0.0.0.0/0.0.0.0 when there is a default route via a WAN Load Balancing "interface"?

For example, here's my WAN LB configuration:

Here's how the routing table looks like (please disregard the missing gateway):

This is how the new default route should look like:

And here's the error I get when I click OK on the previous screenshot:

This is the system info:

Thank you,

Slavko

[Dave_Hall · Accepted solution]

slavko wrote:

:) Tried that already. Won't let me. When I send the end, it prints out an error message. That's why I'm here. :)

This is odd.  What happens if you disable the load-balancing interface(s) first and/or load the config into a text editor, add the route, load it back into the fgt. 

I am assuming port10 is your backup link?  If it's not, I would set the dest IP/mask to the network (mask) used on that interface.

[ede_pfau]

Same problem, same reason:

There can only be ONE default route per system.

And yes, the LLB ports probably needed gateway addresses but that's not the crucial point here.

Check your network flow design if you need more than one default route ("route of last resort" - how many "last resorts" are there?).

And please, don't yell in posts. If you want to attract attention then please open a post of your own.

[dphills]

I am having the same issue.  I need to add a second default route for failover purposes.  The second default route will be at a higher distance.  I'm using the spillover functionality on the WLB, so I would prefer to keep that functionality.  I'm surprised Fortinet hasn't fixed this by now.