vip - 2 wan to 1 ip lan

[daac]

Hello I would like to make a query, I have two isp connected to a 60D wan 1 and wan2 device, and I want the queries to an ip of isp1 and an ip of isp 2 to be redirected to the same private ip (vip) taking into account that the requests the server will be made to the same port, which can be done so that the server responds correctly.

wan1(190.23.15.2)                                 >>>>>> DMZ (server 192.168.0.15) wan2(200.31.15.20) vip1  190.23.15.2:80>192.168.0.15:80 vip2  200.31.15.20:80>192.168.0.15:80 Routes 0.0.0.0 0.0.0.0  190.23.15.1 distance 10 pr 0

0.0.0.0 0.0.0.0  200.31.15.1 distance 10 pr 5

In this scenario, it responds correctly to the requests made to 190.23.15.2 but not to the 200.31.15.20 that could be made at the routing level, since I understand that a policy route could be added BUT to answer all the queries only for the wan2

Thanks

[dmcquade]

The issue may be caused by asynchronous routing. The defined routes may be causing all return traffic to be sent out the WAN1 interface. Run a "diag sniffer packet and 'host <IP address of source> and port 80' 4 0" command on the firewall to verify this.

A possible solution may be that if you can configure the website to be associated with more than IP address, add a second address to the server and use this internal address for the second VIP.

HTH

d

[ede_pfau]

You could try to set both default routes to identical values (which has implications!), here to set the priorities equal. As the inbound traffic is tracked in the NAT table the reply traffic should egress on the interface the original request came in through.

Identical default routes cause the FGT to use ECMP which will change the behavior of outbound traffic: depending on the combination of source and destination address one of both routes will be used alternatingly. This load-balancing may or may not be desired.