Firewall 80E configure WAN

[antonio_gualtieri]

Experts,   I am new to Fortinet World. So I need your HELP.

We have 2 Wan connections wan1 for Amministration and Contactcenter . The other one wan2 for Helpdesk. So I want 2 connection going through firewall (Not load balancing).

Amministration, Contactcenter network which is on Vlan1 should go out on Internet through WAN1 (GW 10.4.4.1) conntect to ADSL_1.

Helpdesk network should go out on Internet through WAN2 (GW 10.5.5.1) conntect to ADSL_2.

[ul]

Vlan 2 Amministration 192.168.1.1/24 network 192.168.1.0/24

Vlan3 Helpdesk 192.168.10.1/24 network 192.168.10.0/24

Vlan 4 Contactcenter 192.168.2.1/24 network 192.168.2.0/24

Vlan4 should comunicate with vlan2[/ul]

Is it possible with Fortigate 80D ? if yes then someone can help me with in detail or guide me to correct direction via Video or reading material.

  Thanks in advance.    Regards

[mjcrevier]

That is pretty straight forward to configure.

Here are high-level steps on what you need to do:

1) Enable SDWAN, and add wan1 & wan2 to SDWAN configuration

2) Configure performance sla's

3) Configure SDWAN rule that matches a source of 192.168.1.0/24 & 192.168.2.0/24, and select interface preference to be 1: wan1, 2: wan2

4) Configure SDWAN rule that matches a source of 192.168.2.0/24, and select interface preference to be 1: wan2, 2: wan1

5) Configure policies

These cookbooks are a great resource:

Complete this first:

https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/218559/creating-the-sd-wan-interface

Then go through this one:

https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/342836/sd-wan-rules-lowest-cost-sla

Just adapt the examples provided to your environment.

[antonio_gualtieri]

thank you for the help guys!!!!!.

Today I tried to direct traffic on wan 1 and 2. Load balancing works well. I have another question. If I had ASDL 1 , ADSL 2 , and ADSL_3

how can I handle outgoing traffic?

example

vlan 1 to wan 1

vlan 2 and vlan 3 to wan 2

vlan 4,5 to wan 3 (port DMZ outgoing o port 10 for example)

its possible?