best way to setup 2 internet connected Fgt' s on a single Lan?

[Ralph1973]

Hello, We have a customer, who has a ' stretched' lan over 2 sites. The sites are connected via a dedicated 50MB fiber line. On each site there is a Fortigate 40c firewall. At this moment, all internet traffic is routed via site B. Mail is going via site A. Please see picture. I was wondering whether it is possible to use a kind of load balancing/ failover method to distribute the traffic, just like when you use a single Fortigate with wan1 and wan2 failover. Fortigate on site B is default gateway 192.168.1.254 Fortigate on site A is gateway for mail server: 192.168.1.253 thanks in advance, Ralph

[richr]

Interesting thread...kind of what I am looking to do as well. Maybe PBR would do this? But someone mentioned in the FortiOS request that during a policy creation, you can set it to which gateway to redirect traffic.

[rwpatterson]

Personally, unless there was a dying need to share the same IP space over the campus, I would split the two spaces and use a routing protocol (RIP or OSPF, etc) to balance traffic. This way if either Internet link drops, traffic will automatically forward to the working one. Also,save yourself some trouble down the road, and get away from the 192.168.1.x address space. Probably THE most used default space out there.