SD WAN Configuration for Failover

[RolandBaumgaertner72]

Hi,

we are in the middle of changing a FG300 cluster to a new FG200 cluster.

In the old config we didnt use SD WAN, we had like one WAN1 for the MPLS connections and WAN2 and WAN3 for Internet Access. WAN1 mainly has all VIPs and VPNs, also it is a shared Internet Access so thats why we got WAN3 for all outgoing traffic.

Now we would like SD WAN for Load Balancing or primary failover reasons but I am not sure what would be the correct configuration. If I do the implicit rule with 99%  - 1% or what is the best way?

Thanks for your suggestions!

[AEK]

Hi Roland

Certainly SD-WAN is the best option to manage your WAN traffic.

I believe the good idea is first to read how it works and how it is configured.

You may start here:

https://docs.fortinet.com/document/fortigate/7.4.4/administration-guide/889544

Hope it helps

[RolandBaumgaertner72]

Hi,

we are using SD WAN with other FGs but still have always kind of problems. I know this gate and we have experience with SD WAN.

This case is special since all branch offices connect via MPLS and use this gateway for internet.

Something like best use cases from users would be great, like to know what to do in what kind of case and that it works fine. Again, in our case it would be using WAN2 and WAN3 with failover, like 100% WAN3 and when WAN3 fails, move to WAN2.

Thanks