Hot!WAN connection Link-Monitoring

Author
catalin_alexandru
New Member
  • Total Posts : 4
  • Scores: 0
  • Reward points: 0
  • Joined: 2019/07/24 02:47:17
  • Status: offline
2019/07/24 03:02:01 (permalink)
0

WAN connection Link-Monitoring

Hello. 
I have a Fortigate 60E with 2 WAN connection. One is static IP (wan1 - main), other is PPoE (wan2 - backup).
 
 
S* 0.0.0.0/0 [10/0] via 89.xxx.xx.253, wan1, [1/0]
                   [10/0] via 82.xx.xxx.1, wan2, [2/0]
C 10.0.0.1/32 is directly connected, ppp1
C 82.xx.xxx.30/32 is directly connected, ppp1
C 89.xxx.xx.252/30 is directly connected, wan1
C 192.168.100.0/23 is directly connected, internal
 
Same distance, and different priority.
I try to configure link-monitor, when wan1 is down, all user inside my network get out traffic using wan2:
 
config system link-monitor
edit "wan1 Failover"
set srcintf "wan1"
set server "8.8.8.8"
set gateway-ip 89.xxx.xx.253
set update-cascade-interface disable
next
edit "Wan2 Failover"
set srcintf "wan2"
set server "8.8.8.8"
set gateway-ip 82.xx.xxx.1
set update-cascade-interface disable
next


Is the correct setting? 
 
Best regards!
 
#1

8 Replies Related Threads

    orani
    Silver Member
    • Total Posts : 101
    • Scores: 1
    • Reward points: 0
    • Joined: 2019/07/11 12:54:18
    • Location: Athens
    • Status: offline
    Re: WAN connection Link-Monitoring 2019/07/24 04:52:17 (permalink)
    0
    Why don't you try SD-WAN?
    #2
    catalin_alexandru
    New Member
    • Total Posts : 4
    • Scores: 0
    • Reward points: 0
    • Joined: 2019/07/24 02:47:17
    • Status: offline
    Re: WAN connection Link-Monitoring 2019/07/24 05:04:32 (permalink)
    0
    Because i already have a lot of IPv4 policy and i have to reconfigure all. This is not an option.
    On show the question is: 
     
    set update-cascade-interface (enable or disable )?
    set update-static-route (enable or disable) ?
     
     
    #3
    orani
    Silver Member
    • Total Posts : 101
    • Scores: 1
    • Reward points: 0
    • Joined: 2019/07/11 12:54:18
    • Location: Athens
    • Status: offline
    Re: WAN connection Link-Monitoring 2019/07/24 05:16:55 (permalink)
    0
    What about policy routing?
    #4
    catalin_alexandru
    New Member
    • Total Posts : 4
    • Scores: 0
    • Reward points: 0
    • Joined: 2019/07/24 02:47:17
    • Status: offline
    Re: WAN connection Link-Monitoring 2019/07/24 05:38:49 (permalink)
    0
    How to use policy route for wan redundancy? :)
    I remain to my main request, in link-monitor :
     
        set update-cascade-interface (enable or disable )?
        set update-static-route (enable or disable) ?
     
    Thank you !
    #5
    brycemd
    Silver Member
    • Total Posts : 75
    • Scores: 4
    • Reward points: 0
    • Joined: 2016/12/03 11:24:30
    • Status: offline
    Re: WAN connection Link-Monitoring 2019/07/24 06:40:44 (permalink)
    0
    disabling the cascade is fine, and enable update-static-route which is default anyways.
     
    What you posted should work, however you likely don't need a monitor for WAN2. Since WAN1 is your primary, WAN2 will never be active unless WAN1 fails. So monitoring it to remove the route isn't really needed
     
    Also, even though it's not SD-WAN, the link monitor status can be seen in Monitor > SD-WAN(depending on what version you are on it may be called something else)
    post edited by brycemd - 2019/07/24 06:45:29
    #6
    Toshi Esumi
    Expert Member
    • Total Posts : 1675
    • Scores: 139
    • Reward points: 0
    • Joined: 2014/11/06 09:56:42
    • Status: offline
    Re: WAN connection Link-Monitoring 2019/07/24 09:16:46 (permalink)
    0
    FYI: "diag sys link-monitor status" in CLI
    #7
    catalin_alexandru
    New Member
    • Total Posts : 4
    • Scores: 0
    • Reward points: 0
    • Joined: 2019/07/24 02:47:17
    • Status: offline
    Re: WAN connection Link-Monitoring 2019/07/24 23:19:01 (permalink)
    0
    Thank you for your answer. 
    It's harder to do connection tests because the system is in production almost 24 out of 24. I will delete the monitoring for wan2, unless it makes sense for the main one to be.

    I monitor ping to the DNS server of  my provider. On Google DNS servers sometimes timeouts appear for a few seconds, enough for the system to set the main route down. What do you think, use gateway or dns provided by provider or google dns / open dns?
    #8
    Lucascat
    Silver Member
    • Total Posts : 75
    • Scores: 2
    • Reward points: 0
    • Joined: 2004/09/10 10:11:41
    • Status: offline
    Re: WAN connection Link-Monitoring 2019/09/14 07:31:19 (permalink)
    0
    You can use multiple IP to monitor the link status...
    #9
    Jump to:
    © 2019 APG vNext Commercial Version 5.5