multiple VPN as failover mpls

[Mannaz]

Hi, im migrating a site from cisco to fortinet (FG-80f), and one thing the cisco provider couldnt do was creating multiple failover vpns in case the MPLS link went down.

the MPLS is connecting 6 locations, with differents internal ips (e.g : each site has 10.x.0.0/16). All is routed by static routes configured in every site. 10.0.0.0 /8 is being routed by MPLS. What I want to do is that when the mpls link of a site goes down, the VPN starts routing that network. I was thinking of using de sdwan for this, and making a simple redundant WAN conection by static routes. Whats the best way to achieve this?

thanks

[Yurisk]

1) For SD-WAN to consider, all links are supposed to terminate on Fortigate(s) , is it the case, or there is a MPLS router of a sort?
2) The next question is - how do you plan on detecting MPLS link failure ?

[Mannaz]

we have a ISP MPLS router, and our FG, wich is part of the mpls network.

was thinking of doing SDWAN link health checks to monitor MPLS link failure 

[Troubleshooter_73]

Thats what SDWAN on Fortigate is made for. You can combine any type of Interface to a logical SDWAN Interface. Assuming you are famliar with SDWAN you should try to combine your MPLS interface with your IPSec Interface and configure the WAN Link failover by using health checks, so something like this...

https://docs.fortinet.com/document/fortigate/6.4.7/administration-guide/580649/link-health-monitor 

[Mannaz]

yeah, this is what i was thinking of doing. Wanted to know if i was forgetting some other method . thanks