- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Internet won't work in one ISP by connecting two ISP connected to Fortinet 40f
I have two Internet connection with different ip range, but I can able to access Internet with only one ip range.
Can any one guide me
- Labels:
-
FortiGate
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi @Ashok-1234,
Can you make sure you have default routes for both ISP? Are you using SDWAN? Are you able to ping the default gateway?
Regards,
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi,
Default routes are set for both ISP. We are not using SDWAN. I am unable to ping the default gateway's?
Even though when one ISP is working I am unable to ping the gateway.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Please provide the output of this command "get router info routing-table database".
Regards,
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello
The best solution is to configure SD-WAN. Try follow the steps shown below:
https://docs.fortinet.com/document/fortigate/7.4.2/administration-guide/889544/sd-wan-quick-start
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
There are a few different things that could cause this. First, do you have a policy that permits traffic for BOTH internet interfaces (e.g. Permit LAN to ISP1 & Permit LAN to ISP2)? Second, do you have NAT enabled within those policies, assuming you're doing policy NAT? Third, do you have a static/default route for BOTH?
Also, are you trying to do any load balancing or is this an active/passive scenario? The following link provides a couple different load-balancing and failover scenarios and explains how to configure each of them. If you are attempting to load-balance, you may need to adjust the distance and priority settings on your static routes.
Also, should have said this at the top but try doing a source ping from each interface to the default gateway and make sure its reachable. (execute ping-options source <XYZ>)
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Just run a CLI to see the routing table "get router info routing-table all" the see what's at the top like below. You need to have two default routes to both interface one way or the other.
fg40f-utm (root) # get router info routing-t all
Codes: K - kernel, C - connected, S - static, R - RIP, B - BGP
O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
* - candidate default
Routing table for VRF=0
S* 0.0.0.0/0 [1/0] via x.x.x.x, ppp3, [1/20]
[1/0] via y.y.y.y, a, [1/1]
<snip>
Toshi
![](/skins/images/EC9FF2F7BE06D4243426EA19DD2C8052/responsive_peak/images/icon_anonymous_message.png)