Fortigate Static Route for WAN Traffic

[Robert_Brumm]

WAN1 - Spectrum COAX internet

WAN2 - Spectrum eLAN to HQ.

We have a problem with this location where the internet goes down more than it should. When it goes down, we're able to route internet traffic over WAN2 which is usually just for internal traffic. I'd like for this to happen automatically. I set the administrative costs on the static route to 0.0.0.0/0: 10 for WAN1 and 110 for WAN2. This works just fine if I manually disable WAN1 for testing.

I think the problems lies with the Spectrum router we're forced to use in order to have a static IP address. WAN1 is connected to the Spectrum router and gets an IP address from DHCP. 192.168.0.2 or whatever. If the internet goes down, the link for WAN1 stays up, so the Fortigate doesn't realize there is a problem.

Any ideas?

[Toshi_Esumi · Accepted solution]

Try link-monitor on wan1 side to remove the static default route when pinging the internet like 8.8.8.8 fails.
https://docs.fortinet.com/document/fortigate/7.4.4/administration-guide/647723/link-monitor-with-rou...

Toshi

[Robert_Brumm]

Hey, thanks. I wasn't aware of this feature and it's exactly what I needed.

[PRosenlind]

I would look into SDWAN to have it determine which link is the best for your outgoing traffic. 

[Yurisk]

I will second this - SD-WAN is much more user-friendly in its configuration, link monitoring feedback, statistics, as opposed to bare bones link monitor.