Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
shahruddin
New Contributor

How to set default internet line

I have 2 internet line that use dedicated IP address connect to the fortigate 600C.

As  default when user using internet it will use A internet line, how to change B internet as default.

I found similar topic (https://forum.fortinet.com/tm.aspx?m=55676) while creating this post but I did not understand what the thread is talking about.

 

Please help to guide how to do it because I really new and don`t have any idea how to do it.

 

Thanks.

7 REPLIES 7
Bubu
Contributor

Hi,

Simply create a second static route for line B with a distance and priority lower than the route of line A. Then create a policy to allow internal traffic to the secondary WAN.

This procedure allows you to define your default B line. If you want to load balance or other, you will need to make other changes.

BR

Bubu

Bubu

Toshi_Esumi
Esteemed Contributor II

I'm assuming a policy or a set of policies is allowing internet access via both interfaces. Then it's about the default route both interfaces have. Currently a default route toward A internet line is wining. Then do you have two static default routes configured in different costs? Or FG600C is pulling DHCP/pppoe default routes from both internet circuits but different distances are set in interface config?

Check interface config with in CLI:

    config sys int

        show

then if it's not pulling, check static routes

    config router static

        show

 

You need to flip the config between A side and B side whatever you have now.

shahruddin

Hi Bubu, I have tested your method and manage to change B line as default but however after that our 3 branches the tunneling to HQ is down, Others 3 is ok.

 

what I do was login to fortigate --> router --> static routes --> edit static routes B line (Distance = 3 Priority = 3)

 

Why other 3 branches down ? Is there any settings that I miss?

===========================================================================

Hi Toshi

* I'm assuming a policy or a set of policies is allowing internet access via both interfaces - Yes

* Below part I not sure and tried your suggestion to check via CLI and there is lot of info and I`m lost while looking for the right info

 

Currently a default route toward A internet line is wining. Then do you have two static default routes configured in different costs? Or FG600C is pulling DHCP/pppoe default routes from both internet circuits but different distances are set in interface config?

Bubu

shahruddin wrote:

Hi Bubu, I have tested your method and manage to change B line as default but however after that our 3 branches the tunneling to HQ is down, Others 3 is ok.

 

what I do was login to fortigate --> router --> static routes --> edit static routes B line (Distance = 3 Priority = 3)

 

Why other 3 branches down ? Is there any settings that I miss?

Regarding VPN tunnels, what do you have as configuration "policy based or route based"? Can you please forward us all active routes?

get router info routing-table all

 

Thanks

Bubu

Bubu

shahruddin

 

Configure using route based.

Bubu

My advice to you: Leave default VPNs at distance 10 priority 0 Line B in distance 20 priority 0 Line A in distance 20 priority 10

Bubu

Toshi_Esumi
Esteemed Contributor II

So you're using two default static routes on two ppp interfaces w/ priority 17 on the second one. You just need to flip them to use Line B. Or just use Bubu's suggestion.