0

Organisation don't have AS number .As of now we are doing manually route for any ISP at a time. when default Internet link is go down that time making second link enable on firewall.

I saw the some solution on google which is to configure BGP but for that we need organization AS Number. If any alternative for the failover of internet links(different ISP) then Please provide the solution for the case ,we have fortigate 100D firewall .

  • 2
    Do you need failover just for outbound or also for inbound connections? – Zac67 Dec 18 '18 at 7:14
  • Just for failover for outbound link . – Govind Choudhary Dec 18 '18 at 12:28
  • Most ISPs will let you use a private AS number (similar to private addressing) for BGP peering. – Ron Trunk Dec 18 '18 at 13:33
  • 1
    Would simple fail over of a default route suffice? – Ron Maupin Dec 18 '18 at 15:40
  • Did any answer help you? If so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you can provide and accept your own answer. – Ron Maupin Dec 25 '18 at 10:26
2

Create 2 default routes (0.0.0.0/0) to the 2 gateway addresses of your ISPs. The secondary one should have a higher distance like 20 as the default distance in FortiOS is 10.

This will guard you from link failure. As soon as one link is down, it's default route is deleted from the routing table, and the other one is added.

You will probably want to watch both connections if they can handle outbound traffic (link failure has it's obvious limits). You can set up remote ping servers which send pings to a public, always-up destination. As soon as the ping server fails, the route is deleted.

This is configured in the CLI. You can specify multiple destination servers which have to fail all together to trigger failover.
Here is an example:

config system link-monitor
    edit "quad9"
        set srcintf "wan1"
        set server "9.9.9.9" "9.9.9.10"
        set interval 10
    next
end

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.