Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
clehman
New Contributor

HA failover for 2 FortiGate's on separate networks & separate ISP connections

I have two separate FortiGates controlling a separate network each that have their own ISP connection (one from comcast, the other from Verizon).  I want to be able to provide a redundant internet connection between the two networks (i.e. if FortiGate 1's WAN connection to comcast goes down, it redirects traffic to FortiGate 2's WAN connection to Verizon and vice versa).

 

Would this be acheivable if there was a physical connection between the two FortiGates and some kind of HA configuration was setup between the two FortiGates? I would still want each FortiGate/Network to operate off of its primary ISP connection, however if one fails ideally it would automatically switch to the other.  ( see diagram below)FortiGate HA Scenario.png

 

FortiGate 

 

2 REPLIES 2
gfleming
Staff
Staff

So these FGT's are in separate locations? And you can connect them using Fiber?


You could accomplish what you want by having a default route advertised from each FGT across the fiber connection. If the main ISP goes down and you lose the route you will failover to the other FGT using the advertised route.


You could also just use static routes and SD-WAN. Or any combination of the above really. Lots of ways to do what you want.

Cheers,
Graham
clehman

Yes, they are two separate buildings but they are right next to each other and have conduit between the buildings with fiber connections.    Appreciate the suggestions!

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors