Help
Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Newbie77
New Contributor

Created on ‎07-09-2015 06:53 AM

IPSEC VPN failover

Has anyone setup a failover for IPSEC VPN connections within a Fortigate?  I'm running firmware version 5.2.3 and have two ISPs. 

 

Any help will be much appreciated.

 

Thanks

Labels:
10291
0 Kudos
3 REPLIES 3
gschmitt
Valued Contributor

Created on ‎07-10-2015 12:51 AM

You mean "In case ISP1 failes try to establish the IPSec connection through ISP2"?

1998
0 Kudos
Newbie77
New Contributor

Created on ‎07-10-2015 03:37 AM

Yes.  I researched and saw that Cisco ASAs have the ability to do that.

1998
0 Kudos
Sushilk
New Contributor

Created on ‎07-10-2015 04:48 AM

I would suggest you to configure the route based VPN.

Create a IPSEC policy for each ISP (assuming remote site also having two ISP) and play with routing.

 

 

If Peer side VPN device has just one ISP then configure your Fortigate device  as backup IPSEC interface only (You need to do it via CLI).

 

Regards,

Sushil

1998
0 Kudos
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors
View all
Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Social Media
Security Research
Company
News & Articles
Contact Us

Copyright 2024 Fortinet, Inc. All Rights Reserved.