Hot!Some users load balance to new ADSLs

Author
DamianLozano
Bronze Member
  • Total Posts : 27
  • Scores: 0
  • Reward points: 0
  • Joined: 2019/01/28 11:28:32
  • Status: offline
2019/08/16 05:16:14 (permalink)
0

Some users load balance to new ADSLs

Hello,
 
I have currently a Fortigate 100E with firmware 5.6.6, this has 3 different internet connections (Wan1, Wan2 and Port1)
These 3 ISPs have static routes with the same distance and pririty, and I have some policy routes for specific traffic.
I need to add 2 additionals ADSLs (Port2 and Port3), I need to configure for specific IPs could access Internet only through any of these 2 new ADSLs (Load balance), and keep the others to go out like now.
For example: I need to make a load balance for 172.20.4.128/25 between port2 and port3.  And keep the other traffic like now. 
I have created a SDWAN, configured both interfaces and added these to the SDWAN
The fortigate does not allow me to create a policy route with the SDWAN.
Which is the better way to accomplish the task?
Is the only way to add a static route for the SDWAN with the same distance and priority than other ISPs and using IPv4 Policies to select which local IP goes out through which interface?
Any other suggestion? (with or without SDWAN)
 
Thanks in advance.
Regards,
Damián
#1

8 Replies Related Threads

    Dave Hall
    Expert Member
    • Total Posts : 1477
    • Scores: 163
    • Reward points: 0
    • Joined: 2012/05/11 07:55:58
    • Location: Canada
    • Status: offline
    Re: Some users load balance to new ADSLs 2019/08/16 11:28:27 (permalink)
    0
     Are you creating these rules under SD-WAN Rules?
     
     

     

    Attached Image(s)


    NSE4/FMG-VM64/FortiAnalyzer-VM/5.4/6.0 (FWF40C/FW92D/FGT200D/FGT101E)/ FAP220B/221C
    #2
    DamianLozano
    Bronze Member
    • Total Posts : 27
    • Scores: 0
    • Reward points: 0
    • Joined: 2019/01/28 11:28:32
    • Status: offline
    Re: Some users load balance to new ADSLs 2019/08/16 12:28:08 (permalink)
    0
    I still did not create any rule
    Just wanted to know which is the better way to accomplish what I mentioned
    I think SD-WAN Rules are to send some traffic through some SD-WAN member, which so far I dont need to do, just need to make a load balance with those traffic which should go out through the SD-WAN
     
    Thanks
    Regards
    Damián
    #3
    orani
    Silver Member
    • Total Posts : 92
    • Scores: 1
    • Reward points: 0
    • Joined: 2019/07/11 12:54:18
    • Location: Athens
    • Status: offline
    Re: Some users load balance to new ADSLs 2019/08/16 13:17:26 (permalink)
    0
    You can make two ip pools with overload option and your port 2,3 public ips. Then create the address groups needed for your internal machines which you want to pass from these two lines. Create a rule from internal to SD-WAN with source those addresses and destination any. Enable NAT and choose "use dynamic ip pool", add to the dynamic pool the two objects that you created at the first step.
     
    This should route your traffic from those interfaces.
    #4
    DamianLozano
    Bronze Member
    • Total Posts : 27
    • Scores: 0
    • Reward points: 0
    • Joined: 2019/01/28 11:28:32
    • Status: offline
    Re: Some users load balance to new ADSLs 2019/08/19 12:26:17 (permalink)
    0
    Hmmmmm,
    Sorry about the delay.
    Thanks Orani for your response.
    What happen if the ADSLs has dynamic IPs?
     
    Thanks in advance.
    Regards,
    Damián
    #5
    orani
    Silver Member
    • Total Posts : 92
    • Scores: 1
    • Reward points: 0
    • Joined: 2019/07/11 12:54:18
    • Location: Athens
    • Status: offline
    Re: Some users load balance to new ADSLs 2019/08/19 21:28:11 (permalink)
    0
    Hmmm, thats an intresting question. I have never been in that situation. I do not know what should the configuration be. Probably you can't set an ip pool with a static ip when your isp gives you dynamic ips.
     
    A posible scenario might be the following. The ips your isp gives to you must be from a specific subnet. If thats true, you might be able to choose overload and set the range with the start and end ip of this subnet. But to be sure if this is true you must contact your isp.
     
    I think this scenario will work, but keep in mind that i have never configured something like that.
    #6
    DamianLozano
    Bronze Member
    • Total Posts : 27
    • Scores: 0
    • Reward points: 0
    • Joined: 2019/01/28 11:28:32
    • Status: offline
    Re: Some users load balance to new ADSLs 2019/08/20 07:29:24 (permalink)
    0
    Thanks Orani,
     
    What happen if I dont specify "use dynamic ip pool" in the rule?
    If I just add a static route for the SDWan to 0.0.0.0/0 with the same distance and priority than the other WAN interfaces?
    Will this work?
     
    Regards,
    Damián
    #7
    orani
    Silver Member
    • Total Posts : 92
    • Scores: 1
    • Reward points: 0
    • Joined: 2019/07/11 12:54:18
    • Location: Athens
    • Status: offline
    Re: Some users load balance to new ADSLs 2019/08/20 14:36:40 (permalink)
    0
    I think that will work.
    #8
    DamianLozano
    Bronze Member
    • Total Posts : 27
    • Scores: 0
    • Reward points: 0
    • Joined: 2019/01/28 11:28:32
    • Status: offline
    Re: Some users load balance to new ADSLs 2019/08/21 04:40:02 (permalink)
    0
    Ok, thanks.
    Will try
     
    Regards,
    Damián
    #9
    Jump to:
    © 2019 APG vNext Commercial Version 5.5