Multi WAN of same ISP - 200D (v5.4.4)

[hoaian83]

Hi all,

Please help me the following case as picture on FTG 200D. I have 2 internet line of same ISP (same gateway) and this is what I want for my network:

- 192.168.1.x -> WAN 1 (static ip)

- 10.1.1.x -> WAN 2 (static ip)

- Route 2 network layer above

As succeeded, 2 networks see each other, in/out through WAN 1 is OK, but I just can make out through WAN 2. The problem is that I cannot ping ip of WAN 2 from outside and cannot access 10.1.1.x through WAN 2 from outside.

Please help me config this in GUI.

Thanks,

Hoai An

[hoaian83]

any help? :(

[zeki893]

i don't think that's possible with the same gateway. setup the the two wan ports as a active/redundant LAG.

[hoaian83]

it's not redundant WAN, it's separated WAN. I just want to use Fortigate as a PPOE device for 2 lines of internet. Any suggestion?

[zeki893]

but in your diagram they both have the same gateway. was that a mistake?

[hoaian83]

Nope. Same gateway bc of same ISP. And I got trouble how to make it work for both in/out through WAN 2

[lunhas2k4]

Hi @hoaian83,

I had a similiar issue with a client of mine, I resolved it by using VDOMS. It was an older version of the FortiOS I used. I believe that concept should be the same.

Let us know how it goes.

[Alpha7]

Have you tried with both WAN1 and WAN2 default route with same distance and policy routes for source based routing?

[Carl_Wallmark]

You could use Policy Routes:

1. Source: 192.168.1.x -> Dst: 0.0.0.0/0.0.0.0 ->Use WAN1 GW: 115.16.1.20

2. Source: 10.1.1.x -> Dst: 0.0.0.0/0.0.0..0 -> Use WAN2 GW 115.16.1.20

Or use VDOMs, more complicated but works.

[hoaian83]

@lunhas2k4: Thanks, I will give this way a try after testing with policy route. And will let you know the result.

@Alpha7: Thanks, I tried it but not work. I am trying this way again.

@Selective: Thanks, I will try this way again and let you know.