Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
knet4
New Contributor

Fortigate 100A & Dual WAN

Hello,

We have the Fortigate 100A and we have connected  2 ISP to WAN ports. 

config system interface
    edit "wan1"
        set vdom "root"
        set ip X.X.X.X 255.255.255.0
        set allowaccess ping
        set gwdetect enable
        set detectserver "8.8.8.8"
        set log enable
        set type physical
        set alias "ISP1"
    next
    edit "wan2"
        set vdom "root"
        set ip X.X.X.X 255.255.255.224
        set allowaccess ping
        set type physical
        set alias "ISP2"

 

We have Static route:

config router static
    edit 1
        set device "wan1"
        set gateway I.S.P.1
    next
    edit 2
        set device "wan2"
        set gateway I.S.P.2
        set priority 100

 

How to do that the slow internet from ISP1 (ping> 800ms), it has switched the default gateway to ISP2 ?

7 REPLIES 7
Dave_Hall
Honored Contributor

Hi Jan.  Can you rephrase this question? 

 

knet4 wrote:

How to do that the slow internet from ISP1 (ping> 800ms), it has switched the default gateway to ISP2 ?

NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C

NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C
ericli_FTNT
Staff
Staff

knet4 wrote:

 

How to do that the slow internet from ISP1 (ping> 800ms), it has switched the default gateway to ISP2 ?

If I'm correct, you want the FGT to choose the other WAN link if the current link has ping delay >800ms, right?

knet4

ericli wrote:

 

 

If I'm correct, you want the FGT to choose the other WAN link if the current link has ping delay >800ms, right?

Yes yes

ericli_FTNT

Okay then, but I'm not sure about which version of FortiOS your 100A is running with.

 

If you could execute "config system virtual wan-link" on your device, you could set the threshold as 1000ms for switch-over.

 

So check the command first please.

Dave_Hall

I think Jan already indicated 4.0 MR2 in his original post, and I believe ForiOS support for for 100A ended at 4.0 MR3.  Wasn't "virtual-wan-link" introduced in 5.2?

NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C

NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C
ericli_FTNT

I agree with you. FGT 100A might not have that feature.

knet4

Hi, 

this command is not working.

 

My firmware:

Firmware Versionv4.0,build0334,111018 (MR2 Patch 9)
Labels
Top Kudoed Authors