Fortigate 60C Load Balancing

[kahymo]

Hi Fortinet experts

i installed a Fortigate 60C for load balancing purpose

so the use is to provide redundant internet using 2 internet providers

the internet providers both are not that great when it come to reliability:

the problems being:

1. when they upgrade their materials and that create a lot of connectivity issues

2. when too many users in the buillding are downloading their movies peak hours)

the options are limited,

and i have installed the 2 connections with the same weight

and the Fortigate provide 50/50 connectivity from both providers

The big question, is there a way that the Fortigate can switch to one provider only

when the other is obviously down

right now it seem that when one connection is having problem, the connecticity response time is terrible

because it still try to connect a down line

so it would be a 50/50 load balancing

that will turn to a 100/0 when one of the provider is down

thank you for any help

 and any suggestions are welcome

Hal

[sw2090]

one way is to use sd-wan and create some health check for sd-wan.

That would check the wan for availability in a specified interval and way and if it meets the conditions set to mark a wan as down it sd-wan will drop it until the health check reports it back online.

As long as all wans are online it will use the specified loadbalancing algorithm or sd-wan rules (if there are any except load balancing).

I always use this for health check:

#1: ping 8.8.8.8 (google dns) every 5sec and if that fails 3 times => down

#2: ping 141.1.1.1 (ECRC) every 5sec and if that fails 3 times => down

since health checks are a logical AND (if there is more then one) a wan will be considered down only if both failed.

This is one way. There may of course be others without sd-wan.