Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
talco
New Contributor

Duel ISP to Singel ISP - IPsec

Hi,

 

I work at a company that hold two branches,

1st branch has a 60E and 1 public IP address.

2nd branch has a 60F and 2 public IP addresses from different ISP's.

I want to connect the sites with IPsec tunnel, 

there is an option to connect both of the 2nd branch IP's so if one of them go down the other will keep the tunnel up?

Thanks a lot, let me know if I miss any important information.

2 REPLIES 2
emnoc
Esteemed Contributor III

just build two IPSEC tunnels and use a dynamic routing protocol to  weigh the path that you prefer to ISP1 or ISP2

 

Ken Felix

PCNSE 

NSE 

StrongSwan  

PCNSE NSE StrongSwan
Toshi_Esumi
Esteemed Contributor III

If you want to use static routes instead, set two routes to both tunnel with different distance or priorities then use link-monitor to remove the primary route when the primary tunnel goes down. There should be multiple articles available when you search them on the internet.

Labels
Top Kudoed Authors