setting default route.

[technik]

I have two internet connections on a fg 110c, port1 and port2. For whatever i reason i cannot set port 1 as default. routing table lists port2, I have deleted all the settings relating to routing, and still unable to find whats wrong. Any suggestions would be greatfully appreciated.

[billp]

You could download the config and do a search to see where port2 is listed. Or, you can also use

diag sys checkused system.interface.name port2

If that doesn' t reveal anything, you might want to try a reboot to see if that changes behavior.

[rwpatterson]

Check the speeds on the ports. (I believe) the higher speed port will get the traffic before the slower... Also from the CLI have you tried to change the priority?

[#4]

Hi technik The following article give some tips : Technical Note : Conditions to get a route in the FortiGate routing table (valid next-hop for DHCP, PPoE, or static routes) http://kb.fortinet.com/kb/microsites/search.do?cmd=displayKC&docType=kc&externalId=FD30119 -J.

[technik]

Here is the current config, Both connection speeds to the modems are identical. 100mb links. config system interface edit " wan1" set vdom " root" set ip 192.168.0.1 255.255.255.0 set allowaccess ping https set type physical set alias " Main" next edit " wan2" set vdom " root" set ip 192.168.2.211 255.255.255.0 set allowaccess ping set type physical set alias " Link" next edit " port1" set vdom " root" set mode dhcp set distance 10 set allowaccess https ssh set detectserver " 192.168.20.1" set type physical set alias " Internet1" set defaultgw enable set dns-server-override disable next edit " port2" set vdom " root" set mode dhcp set distance 10 set allowaccess https ssh set detectserver " 192.168.21.1" set type physical set alias " Internet2" set defaultgw enable set dns-server-override disable next edit " port8" set vdom " root" set ip 192.168.1.1 255.255.255.0 set allowaccess ping set type physical set alias " Wireless" next end config router static edit 1 set device " port1" set gateway 217.41.31.91 next edit 2 set device " port2" set gateway 217.41.13.146 set priority 10 next end config router policy edit 1 set input-device " wan1" set protocol 6 set start-port 80 set end-port 443 set output-device " port2" next edit 2 set input-device " wan1" set protocol 17 set start-port 53 set end-port 53 set output-device " port2" next edit 3 set input-device " port8" set protocol 6 set start-port 80 set end-port 443 set output-device " port2" next edit 4 set input-device " port8" set protocol 17 set start-port 53 set end-port 53 set output-device " port2" next end

[technik]

diag sys checkused system.interface.name port2 entry used by table firewall.policy:policyid ' 20' entry used by table firewall.policy:policyid ' 12' entry used by table firewall.policy:policyid ' 13' entry used by table firewall.policy:policyid ' 14' entry used by table firewall.policy:policyid ' 16' entry used by table firewall.policy:policyid ' 17' entry used by table firewall.policy:policyid ' 18' entry used by table firewall.policy:policyid ' 19' entry used by table firewall.policy:policyid ' 15' entry used by table firewall.policy:policyid ' 22' entry used by table firewall.policy:policyid ' 23' entry used by table firewall.policy:policyid ' 21' entry used by table router.static:seq-num ' 2' entry used by table router.policy:seq-num ' 1' entry used by table router.policy:seq-num ' 2' entry used by table router.policy:seq-num ' 3' entry used by table router.policy:seq-num ' 4'

[rwpatterson]

You have the priority option set on port2, but not on port1. Make them equal, and see where you get.

config router static edit 1 set device " port1" set gateway 217.41.31.91 next edit 2 set device " port2" set gateway 217.41.13.146 set priority 10 next end

[technik]

tried setting both to equal priority routing is still the same

[#9]

According to your configuration, you should acquire 2 default routes via DHCP. With this command you should see what next-hop have been given and if the static routes are valid : " get router info routing-table database" -J.

[technik]

S *> 0.0.0.0/0 [10/0] via 217.41.13.146, port2 *> [10/0] via 217.41.31.91, port1 C *> 192.168.0.0/24 is directly connected, wan1 C *> 192.168.1.0/24 is directly connected, port8 C *> 192.168.2.0/24 is directly connected, wan2 C *> 217.41.13.144/30 is directly connected, port2 C *> 217.41.31.88/29 is directly connected, port1

get router info routing-table database