Good afternoon,
We have a FG-60F with 2 SD-WAN zones. The first one for corporate use is connected to a single Starlink antenna. The second SD-WAN zone for client use is connected to 2 Starlink antennas. These 2 apply load balancing to maximize bandwidth. The problem is that we can't use both SD-WAN zones at the same time for their respective uses because the 2 Starlink antennas all use the same gateway IP 100.64.0.1. Whenever I set a static route 0.0.0.0 to use this IP it will only work for SD-WAN zone 1 or 2, not both
Can this be fixed using policy based routing instead of static routes? Or is there another way to get this to work correctly? Unfortunately, we're unable to change the gateway address of the Starlink devices.
Thanks in advance,
Solved! Go to Solution.
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Thanks for the reply. Your solution does work indeed (as this is how we previously had it setup). The problem is that traffic needs to be setup over the SD-WAN zones as described above, this is due to data limits on the connections.
But I have managed to solve the issue by using Policy Based Routing instead of Static Routes.
Hello
I'm not aware of such issue, but one of the possible solutions may be to put all 3 interfaces in the same zone then manage their usage in SD-WAN rules.
Thanks for the reply. Your solution does work indeed (as this is how we previously had it setup). The problem is that traffic needs to be setup over the SD-WAN zones as described above, this is due to data limits on the connections.
But I have managed to solve the issue by using Policy Based Routing instead of Static Routes.
Hi, I have some similar scenarios where ISP modem/router has the same subnet that internal LAN (192.168.0.x). My solution is create a VDOM to separate the WAN interface so the root VDOM doesn't know that ISP has the same subnet. Sure you can do the same and you will can get the SDWAN working with the VDOM link.
Regards.
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1665 | |
1077 | |
752 | |
446 | |
220 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.