Hot!Redundant Internet IT ALWAYS GOING TO SECONDARY ISP it is not coming back to main ISP

Author
Niyas
New Member
  • Total Posts : 8
  • Scores: 0
  • Reward points: 0
  • Joined: 2020/02/13 01:38:06
  • Status: offline
2020/02/13 02:10:04 (permalink)
0

Redundant Internet IT ALWAYS GOING TO SECONDARY ISP it is not coming back to main ISP

hi
I have Fortigate 100E with firmware v6.2.3 build1066 (GA). i am implementing redundant internet fail over,
My main ISP i configured on WAN1,  my backup internet (DSL) i configured on WAN2. SO i need  always my users should go to wan1 if wan1 fails only switch to wan2(secondary ISP with limited speed) once the wan1 internet service came back it should go back automatically to wan1


unfortunately for me it is not working if wan1 fails it is going to wan2 but when wan1 comes back it not coming back to wan1. it is staying always with wan2.
can any one help me on this

please find the below my configuration details
Note: ISP_MAIN : static ip, ISP_SEC dhcp




config system link-monitor
 edit ISP_MAIN
         (wan1) #get
                  set name ISP_MAIN
                  set server 8.8.4.4
                  set protocol ping
                  set gateway-ip 17.124.19.15
                  set interval 500
                  set timeout 1
                  set failtime 5
                  set recoverytime 5
                  set update-cascade-interface enable
                  set update-static-route enable
                  set status enable
                end
                
                
config system link-monitor
 edit ISP_SEC
         (wan2) #get
                  set name ISP_SEC
                  set server 8.8.4.4
                  set protocol ping
                  set gateway-ip 10.99.99.1
                  set interval 500
                  set timeout 1
                  set failtime 5
                  set recoverytime 5
                  set update-cascade-interface enable
                  set update-static-route enable
                  set status enable
                end
                





TEST_LAB (link-monitor) # get ISP_MAIN

name                : ISP_MAIN

addr-mode           : ipv4

srcintf             : wan1

server              : "8.8.4.4"

protocol            : ping

gateway-ip          : 17.124.19.15

source-ip           : 0.0.0.0

interval            : 500

failtime            : 5

recoverytime        : 5

ha-priority         : 1

update-cascade-interface: enable

update-static-route : enable

status              : enable


TEST_LAB (link-monitor) # get ISP_SEC

name                : ISP_SEC

addr-mode           : ipv4

srcintf             : wan2

server              : "8.8.4.4"

protocol            : ping

gateway-ip          : 10.99.99.1

source-ip           : 0.0.0.0

interval            : 500

failtime            : 5

recoverytime        : 5

ha-priority         : 1

update-cascade-interface: enable

update-static-route : enable

status              : enable
****
instatic Routing i added for both ISP, ISP_MAIN PRIORITY =0, secondary isp (ISP_SEC)= 10

#1
tioeudes
Bronze Member
  • Total Posts : 38
  • Scores: 4
  • Reward points: 0
  • Joined: 2019/10/22 09:47:38
  • Status: offline
Re: Redundant Internet IT ALWAYS GOING TO SECONDARY ISP it is not coming back to main ISP 2020/02/13 10:30:10 (permalink)
0
There was a bug id about this on 5.6.11. If you're link monitor configuration is correct as appears to be, it's possible that this bug is happening again.
 
Test this, try to run the command "execute router restart" after wan1 is back to see if the traffic goes back to be routed to it.
 
if it does, open a ticket on fortinet.
 
 
regards,
tioeudes
 
 
 
#2
Dave Hall
Expert Member
  • Total Posts : 1724
  • Scores: 176
  • Reward points: 0
  • Joined: 2012/05/11 07:55:58
  • Location: Canada
  • Status: offline
Re: Redundant Internet IT ALWAYS GOING TO SECONDARY ISP it is not coming back to main ISP 2020/02/13 11:00:25 (permalink)
0
What you may want to do is set up SD-WAN for the two WAN connections - that link will explain more about setting this up.
 

 
 

Attached Image(s)


NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C
#3
James_G
Gold Member
  • Total Posts : 247
  • Scores: 11
  • Reward points: 0
  • Joined: 2016/02/28 02:55:47
  • Status: offline
Re: Redundant Internet IT ALWAYS GOING TO SECONDARY ISP it is not coming back to main ISP 2020/02/13 12:30:53 (permalink)
0
Can you make both distance and priority higher value on failover
#4
Jump to:
© 2020 APG vNext Commercial Version 5.5