- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
SSL FortiClient VPN Configuration on Multiple ISPs with FortiGate 200F
I’m currently working with a FortiGate 200F that has two interfaces configured with public IPs, each connected to a different ISP. One of the interfaces (ISP-1) has an SSL FortiClient VPN activated for remote work users, and this interface is also set as the default route for the FortiGate.
Now, I would like to activate SSL FortiClient VPN on the second interface (ISP-2) while keeping the default route to ISP-1.
Could anyone provide guidance on how to configure the FortiGate to allow SSL VPN access through ISP-2 without changing the default route?
What would be the best practices for setting this up?
Thank you for your assistance!
- Labels:
-
FortiClient
-
FortiGate
-
SSL-VPN
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Probably the only option is to use ECMP and have a static route with same metric for ISP2. Surely, the "other" outgoing traffic will not pass only over ISP1 (possibly SDWAN can achieve similar outcome)
- Toss a 'Like' to your fixxer, oh Valley of Plenty! and chose the solution, too00oo -
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thank you so much, @AlexC-FTNT , for your valuable support! I truly appreciate your help.
I’ll be looking into the topic on ECMP and SD-WAN.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I'm currently working with a FortiGate 200F that has two interfaces configured with public IPs, each connected to a different ISP.
One interface (ISP-1) is configured with an SSL FortiClient VPN for remote users and is set as the default route for the FortiGate.
I would like to activate the SSL FortiClient VPN on the second interface (ISP-2) while keeping the default route through ISP-1.
In short, I want to enable SSL FortiClient VPN on both ISPs, but keep the default route on ISP-1.
thanks for your interested
![](/skins/images/314F488D15A2016126B094729A0E57E8/responsive_peak/images/icon_anonymous_message.png)