Redundant dynamic VPN to a Dual WAN Central Fortigate

[Layard]

Hello, Im trying to configure a redundant dynamic VPN from a Branch Office with a Fortigate 40C with one Internet service with Dynamic IP TO a Central office with a Fortigate 200B with two Internet conexions with static IP addresses. The two VPN are configured correctly, but they cannot be UP at the same time... they keep alterning the UP state. Does anybody have an idea how to solve it? The tunnel is Interface mode. I appreciate any help. Best Regards, Layard

[guygox]

Hi, Check this : http://docs.fortinet.com/cb/html/FOS_Cookbook/Install_advanced/cb_install-dual-internet.html I remember doing it on a 60C. I just did it in failover mode. You configure your VPN on both Wan (sam config) in interface mode. In Routing configure two routes with same Destination, same distance but different priority. Then your Policy. Don' t forget to configure Dead Gateway Detection in Router/Static/Settings.