The options are “Source IP based” “Weighted load balance” or “Spillover”.
When using both Internet connections at the same time a ECMP (Equal Cost Multi-Path) load balancing method must be selected. The second type of mutli WAN setup is having both Internet connections active at the same time in order to utilize both connections simultaneously and still have redundancy. Configure/copy all the required firewall rules that are needed for the secondary Internet connection, if the primary is WAN1 and the secondary is WAN2 then most or all of the firewall rules for WAN1 will need to be recreated for WAN2 in order to allow traffic when the WAN2 Internet connection is active. The setup for the dead gateway detection is quite simple add an upstream IP address to be pinged by the FortiGate which will tell the firewall if the connection is up or down. These are required when using multiple Internet connections in order for the firewall to know what Internet connections are up/available. DHCP or PPPoE) you will need to set the metric/distance within the interface settings.ģ.
Balanceamento de link fortigate manual#
If the secondary Internet is not a manual connection (i.e. Configure the static route for the secondary Internet’s gateway with a metric that is higher than the primary Internet connection. Ip address, netmask, administrative access options, etc.)Ģ. Configure the interface to be used for the secondary Internet connection (i.e. In order to configure a multi WAN setup for Internet redundancy a few steps must be performed which are listed below.ġ. In this scenario the secondary Internet’s static route (gateway) would have a higher metric than the primary so that it is not active when the primary is up. The first way to configure a multi WAN is for a redundant scenario in which the secondary Internet connection is only used when the primary goes down. There are 2 different ways to configure a multi WAN setup on the firewall which is determined by what is required for the Internet connections. Fortinet FortiGate firewalls offer multiple Internet support with flexibility in how the different Internet connections are utilized.
0 kommentar(er)
