Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Stevenjwilliams83
New Contributor

Replacing two CEs with Active/Passive Fortigate 201Fs

Looking to replace two provider CEs with Fortigate 201Fs. Currently both CEs are active and we have traffic going out each depending on serivces to the internet. We also have a 500Mbps Express route terminating to one CE. Questions I have is the ability to use both ISPs outbound I assume things like PBR will be needed? Or if both are active in a LB method, I am looking at creating duplicate policy rules, One per ISP zone?

When others are using fortigates for their CEs/firewalls, are you using your public IP space from Fortigate inside to your network core? Or are you having your ISP do a NAT of some sort?

1 REPLY 1
lgupta
Staff
Staff

Hello Steven, Good day!

 

> is the ability to use both ISPs outbound I assume things like PBR will be needed? Or if both are active in a LB method, I am looking at creating duplicate policy rules, One per ISP zone?

= You can connect both the ISPs to the FGT and steer the traffic as per needs using PBR or SDWAN, OR you can use Load-balancing.

https://docs.fortinet.com/document/fortigate/7.4.2/administration-guide/19246/sd-wan

 

https://docs.fortinet.com/document/fortigate/7.4.2/administration-guide/144044/policy-routes

 

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-load-balance-traffic-between-two-in...

 

For Internet connectivity, SNAT can be done on the FGT Firewall. It can be the egressing interface IP or the custom IPPOOL.

 

Please let us know if you have more questions.

 

Thanks.

Best regards,

-lgupta



If you feel the above steps helped to resolve the issue mark the reply as solved so that other customers can get it easily while searching on similar scenarios.
Labels
Top Kudoed Authors