Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
FortiAymen
New Contributor

SD WAN problem

Hi, i'm novic in Fortiworld i need your help...

 

i have tow internet connexions (WiMax and ADSL), so i activate Link Load Balancing feature (SD WAN) in FortiOS 5.6

Everything  is OK...

but, i want to redirect Exchange server traffic through WiMax link... how can i d it?

thank you in advance

4 REPLIES 4
Allan_Lago
New Contributor

Hello @FortiAymen,

 

If i understant you correctly you need to use a policy route.

 

Go to System > Feature Visibility and Active the Advance Routing feature.

 

Then you need to create a policy route, goto Network > Policy Route and then create a policy route to match your requirements.

 

You can also do it by the CLI with the following commands:

 

config router policy

    edit 0

        set input-device "internal1" #match this with your exchange server interface gateway

        set srcaddr "exchangeServer" #match this with your Exchange object in Fortigate

        set dstaddr all

        set output-device "WiMax" #The interfce rou want to route this traffic trought

        set gateway 0.0.0.0 #if you have more than 1 ip on this interface i strongly recommend you to use the ip you set as your reverse dns.

    end

 

http://help.fortinet.com/...tic/Policy_Routing.htm

 

I hope this can help you.

 

 

 

 

 

 

 

 

 

   Allan Lago

   Security Analist

   allan.lago@itsense.com.br

   +55 21 96436-1884

   +55 54 99100-0949

   https://itsense.com.br

Allan Lago Security Analist allan.lago@itsense.com.br +55 21 96436-1884 +55 54 99100-0949 https://itsense.com.br
MikePruett

Alago hit the nail on the head. Just policy route your exchange server to use the desired connection and you are on your way.

Mike Pruett Fortinet GURU | Fortinet Training Videos
Allan_Lago

Thank you @MikePruett. xD

 

 

 

   Allan Lago

   Security Analist

   allan.lago@itsense.com.br

   +55 21 96436-1884

   +55 54 99100-0949

   https://itsense.com.br

Allan Lago Security Analist allan.lago@itsense.com.br +55 21 96436-1884 +55 54 99100-0949 https://itsense.com.br
bashrael

Hi,

Would you get the same result by making a SDWan rule with the Exchange server as source, destination all, but as outgoing interface member only the WIMAX interface?

And if yes..whats the difference?

Thanks!

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors