Fortinet SDWAN

[JuanManuel_01]

Hi

We would like to migrate our 2 ISPs to the FG200G for SDWAN configure as load balancer. Our current load balancer, Mushroom, supports a maximum throughput of 300 Mbps. This limits our setup.

Question

Our current setup is 

Mushroom load balancer has four ports: two are connected to our ISPs, one goes to HSIA Xpossible, and the last one goes to the firewall.

I would like to decommission the Mushroom load balancer. Can the FG200G handle a large /16 network with a single VLAN for HSIA Xpossible? Have you tried this setup? Do you have any ideas for a more efficient approach?

[funkylicious]

hi,

just as a heads up, SD-WAN on FortiGate would benefit for outbound ( traffic destined towards the Internet, not from the Internet ) 

[Toshi_Esumi]

If you want to get any useful/meaningful responses, you should explain more about "Xpossible HSIA Gateway" and how its IP networks including its gateway IP are arranged (https://surfsonix.com/more-info/what-is-an-hsia-gateway-a-complete-guide-for-the-hospitality-industr...).
I'm guessing it's just using the load-balancer's LAN side IP as its gateway, and its traffic doesn't come through the firewall now. Then likely you need to put it behind the new(?) FGT since the FGT would terminate those two ISP circuits.
But at least I don't know anything about either devices and this is beyond this community's boundary.

Then how to set up FGT SD-WAN to load-ballance between two circuits is a separate issue and should be relatively easy once the proper network arrangement is designed. 

Toshi

[jiahoong112]

Kindly refer to the FortiGate 200G datasheet to check whether it is sufficient for your network requirements or not: https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/pdf/fortigate-200g-series.pdf 

Even though FortiGate is capable of load balancing traffic to a certain extent, I won't suggest relying on it solely for load-balancing purposes if load-balancing is your priority and top use case. From an SDWAN perspective, FortiGate is able to perform load-balancing on outgoing traffic: https://docs.fortinet.com/document/fortigate/7.6.4/administration-guide/87794/use-sd-wan-rules-for-w...