Inbound Load Balance

[ciscoasa]

Hello, As we know, fortinet can do outbound load balance via Round-robin and weight. But I wonder to know, can fortinet do inbound load balance (multihoming) or inbound fault tolerance ?! thx !!

[ede_pfau]

As rwpatterson remarked lately, for inbound l-b you would use DNS round robin. So this would be external to the FG. Same for fault tolerance.

[Jan_Scholten]

Inbound is always tricky, as this requires normally bgp4 and PIs (Provider independent IPs). When using DNS Round Robin in a fault situation every second DNS lookup will return a unreachable IP (until you have updated your DNS and the dns caching times out). When it comes to site to site VPNs inbound LB should be possible when using a routing protocol (e.g. OSPF) for ecmp routes

[ciscoasa]

thx for ede_pfau and Jan Scholten' s reply !!