Hot!Multi WAN of same ISP - 200D (v5.4.4)

Author
hoaian83
New Member
  • Total Posts : 5
  • Scores: 0
  • Reward points: 0
  • Joined: 2017/03/13 19:00:11
  • Status: offline
2017/03/16 18:03:06 (permalink) 5.4
0

Multi WAN of same ISP - 200D (v5.4.4)

Hi all,
 
Please help me the following case as picture on FTG 200D. I have 2 internet line of same ISP (same gateway) and this is what I want for my network:
- 192.168.1.x -> WAN 1 (static ip)
- 10.1.1.x -> WAN 2 (static ip)
- Route 2 network layer above
 

 
As succeeded, 2 networks see each other, in/out through WAN 1 is OK, but I just can make out through WAN 2. The problem is that I cannot ping ip of WAN 2 from outside and cannot access 10.1.1.x through WAN 2 from outside.
 
Please help me config this in GUI.
 
Thanks,
Hoai An
 
 
 

Attached Image(s)

#1

13 Replies Related Threads

    hoaian83
    New Member
    • Total Posts : 5
    • Scores: 0
    • Reward points: 0
    • Joined: 2017/03/13 19:00:11
    • Status: offline
    Re: Multi WAN of same ISP - 200D (v5.4.4) 2017/03/20 17:30:03 (permalink)
    0
    any help? :(
    #2
    zeki893
    Bronze Member
    • Total Posts : 27
    • Scores: 0
    • Reward points: 0
    • Joined: 2013/04/03 03:12:59
    • Status: offline
    Re: Multi WAN of same ISP - 200D (v5.4.4) 2017/03/27 13:43:58 (permalink)
    0
    i don't think that's possible with the same gateway. setup the the two wan ports as a active/redundant LAG.
    #3
    hoaian83
    New Member
    • Total Posts : 5
    • Scores: 0
    • Reward points: 0
    • Joined: 2017/03/13 19:00:11
    • Status: offline
    Re: Multi WAN of same ISP - 200D (v5.4.4) 2017/03/27 19:00:58 (permalink)
    0
    it's not redundant WAN, it's separated WAN. I just want to use Fortigate as a PPOE device for 2 lines of internet. Any suggestion?
    #4
    zeki893
    Bronze Member
    • Total Posts : 27
    • Scores: 0
    • Reward points: 0
    • Joined: 2013/04/03 03:12:59
    • Status: offline
    Re: Multi WAN of same ISP - 200D (v5.4.4) 2017/03/27 21:06:02 (permalink)
    0
    but in your diagram they both have the same gateway. was that a mistake?
    #5
    hoaian83
    New Member
    • Total Posts : 5
    • Scores: 0
    • Reward points: 0
    • Joined: 2017/03/13 19:00:11
    • Status: offline
    Re: Multi WAN of same ISP - 200D (v5.4.4) 2017/03/27 23:37:06 (permalink)
    0
    Nope. Same gateway bc of same ISP. And I got trouble how to make it work for both in/out through WAN 2
    #6
    lunhas2k4
    New Member
    • Total Posts : 13
    • Scores: 0
    • Reward points: 0
    • Joined: 2013/11/12 10:44:39
    • Status: offline
    Re: Multi WAN of same ISP - 200D (v5.4.4) 2017/03/28 04:12:40 (permalink)
    0
    Hi @hoaian83,
     
    I had a similiar issue with a client of mine, I resolved it by using VDOMS. It was an older version of the FortiOS I used. I believe that concept should be the same.
     
    Let us know how it goes.
    #7
    Alpha7
    New Member
    • Total Posts : 18
    • Scores: 2
    • Reward points: 0
    • Joined: 2014/01/13 01:36:33
    • Status: offline
    Re: Multi WAN of same ISP - 200D (v5.4.4) 2017/03/28 04:38:23 (permalink)
    0
    Have you tried with both WAN1 and WAN2 default route with same distance and policy routes for source based routing?
    #8
    Selective
    Expert Member
    • Total Posts : 2701
    • Scores: 102
    • Reward points: 0
    • Joined: 2007/07/03 10:44:56
    • Location: Gothenburg - Sweden
    • Status: offline
    Re: Multi WAN of same ISP - 200D (v5.4.4) 2017/03/28 04:38:59 (permalink)
    0
    You could use Policy Routes:
     
    1. Source: 192.168.1.x -> Dst: 0.0.0.0/0.0.0.0 ->Use WAN1 GW: 115.16.1.20
    2. Source: 10.1.1.x -> Dst: 0.0.0.0/0.0.0..0 -> Use WAN2 GW 115.16.1.20
     
    Or use VDOMs, more complicated but works.
    #9
    hoaian83
    New Member
    • Total Posts : 5
    • Scores: 0
    • Reward points: 0
    • Joined: 2017/03/13 19:00:11
    • Status: offline
    Re: Multi WAN of same ISP - 200D (v5.4.4) 2017/03/28 18:01:12 (permalink)
    0
    @lunhas2k4: Thanks, I will give this way a try after testing with policy route. And will let you know the result.
    @Alpha7: Thanks, I tried it but not work. I am trying this way again.
    @Selective: Thanks, I will try this way again and let you know.
     
    #10
    zeki893
    Bronze Member
    • Total Posts : 27
    • Scores: 0
    • Reward points: 0
    • Joined: 2013/04/03 03:12:59
    • Status: offline
    Re: Multi WAN of same ISP - 200D (v5.4.4) 2017/03/29 00:47:14 (permalink)
    0
    ya you'll need to use vdoms or another router/firewall to connect the 2nd link. You can't connect that link cuz it's on the same subnet and it would create a loop. 
    Another option is you can ask your ISP to set it up as a 2x1G LAG then you'll have a 2G link.
    #11
    Selective
    Expert Member
    • Total Posts : 2701
    • Scores: 102
    • Reward points: 0
    • Joined: 2007/07/03 10:44:56
    • Location: Gothenburg - Sweden
    • Status: offline
    Re: Multi WAN of same ISP - 200D (v5.4.4) 2017/03/29 04:23:57 (permalink)
    0
    Why would it create a loop ?
     
    WAN1 and WAN2 would have different IPs, only use the same gateway.
    however to use two interfaces on the same subnet you would have to enable "allow subnet-overlap"
     
    config system settings
    set allow-subnet-overlap
    end
    #12
    zeki893
    Bronze Member
    • Total Posts : 27
    • Scores: 0
    • Reward points: 0
    • Joined: 2013/04/03 03:12:59
    • Status: offline
    Re: Multi WAN of same ISP - 200D (v5.4.4) 2017/03/29 14:27:45 (permalink)
    0
    two links to and from the same network without spanning-tree or LAG would be a loop
    #13
    Selective
    Expert Member
    • Total Posts : 2701
    • Scores: 102
    • Reward points: 0
    • Joined: 2007/07/03 10:44:56
    • Location: Gothenburg - Sweden
    • Status: offline
    Re: Multi WAN of same ISP - 200D (v5.4.4) 2017/03/29 15:08:04 (permalink)
    0
    spanning tree is used for L2 networks and to prevent loops, this is still L3, where we route traffic to and from wan1 and wan2
    #14
    Jump to:
    © 2017 APG vNext Commercial Version 5.5