Hot!Monitor Links Without SD WAN

Author
moelharrak
New Member
  • Total Posts : 5
  • Scores: -2
  • Reward points: 0
  • Joined: 2020/10/24 03:15:58
  • Status: offline
2020/11/12 08:29:51 (permalink)
0

Monitor Links Without SD WAN

Hello everybody,
I have a Firewall connected to Dual ISP , WAN1 and WAN2:
WAN1 is used by the Staff_NET to go to the Internet.
WAN2 is used by WIFI Client to surf the Internet.
My goals is to :
- Configure the Failover (means Staff-NET VLAN can use WAN2 if WAN1 goes Down and also WIFI client can use  WAN1 if their primary link (WAN2) goes Down. --> For that I used "Policy Routes" as follow:
Staff_NET --> WAN1
WIFI_Client --> WAN2
Staff_NET --> WAN2
WIFI_Client --> WAN1
I'm Assuming that rules are read by sequence number. Is this config is correct or there is a better way?
- My second concern is to know how to configure Link Monitor for example ping 8.8.8.8 from WAN1 is there is no response the route will be disabled ?
Any idea ?
Thank you
#1

6 Replies Related Threads

    boneyard
    Gold Member
    • Total Posts : 364
    • Scores: 16
    • Reward points: 0
    • Joined: 2014/07/30 11:15:18
    • Status: offline
    Re: Monitor Links Without SD WAN 2020/11/15 07:49:34 (permalink)
    0
    any reason you dont want to use SD-WAN?
     
    policy routes are read in order indeed
     
    for the monitoring you will have to go to the CLI only system link-monitor
    https://kb.fortinet.com/k....do?externalID=FD44679
    #2
    moelharrak
    New Member
    • Total Posts : 5
    • Scores: -2
    • Reward points: 0
    • Joined: 2020/10/24 03:15:58
    • Status: offline
    Re: Monitor Links Without SD WAN 2020/11/15 08:37:33 (permalink)
    1 (1)
    Thank for your answer ,
    Well I don't want to use SD-WAN because I have two unequal Links(WAN1 and WAN2) and I have two LAN Networks , I want LAN1 to use the WAN1 and LAN2 to use the WAN2 this is the company policy for now, BUT we want traffic to use other link only if their Primary WAN that is dedicated for it is DOWN.
    This why I see that using Policy routing and Link monitor is the best option.
    #3
    boneyard
    Gold Member
    • Total Posts : 364
    • Scores: 16
    • Reward points: 0
    • Joined: 2014/07/30 11:15:18
    • Status: offline
    Re: Monitor Links Without SD WAN 2020/11/15 10:04:27 (permalink)
    5 (1)
    SD-WAN should be able to handle unequal links fine, it is quite broad in applications.
     
    but it is your choice, policy routes and link monitor will do something similar. what im missing is the GUI part of it, SD-WAN makes it all a little easier to configure and monitor.
    #4
    moelharrak
    New Member
    • Total Posts : 5
    • Scores: -2
    • Reward points: 0
    • Joined: 2020/10/24 03:15:58
    • Status: offline
    Re: Monitor Links Without SD WAN 2020/11/16 04:20:17 (permalink)
    0
    I have just done a test using  SD-WAN and I think it's working fine , I was thinking that with SD-WAN I can't force LAN1 to use the WAN1 and LAN2 to use the WAN2 and do the failover if any WAN link goes DOWN , but apparently it works using "SD-WAN Rules" and "Performance SLA".
    Is that correct what I did or there is a better approach?
    #5
    ede_pfau
    Expert Member
    • Total Posts : 6383
    • Scores: 547
    • Reward points: 0
    • Joined: 2004/03/09 01:20:18
    • Location: Heidelberg, Germany
    • Status: offline
    Re: Monitor Links Without SD WAN 2020/11/16 08:56:49 (permalink)
    5 (2)
    SD-WAN rules are policy routes. No wonder it works this way now.

    Ede

    " Kernel panic: Aiee, killing interrupt handler!"
    #6
    moelharrak
    New Member
    • Total Posts : 5
    • Scores: -2
    • Reward points: 0
    • Joined: 2020/10/24 03:15:58
    • Status: offline
    Re: Monitor Links Without SD WAN 2020/11/16 09:06:03 (permalink)
    0
    Thank all of you for your answers :)
    #7
    Jump to:
    © 2020 APG vNext Commercial Version 5.5