Solved

Fortigate 200B Failover connection

Posted on 2010-11-23
6
2,776 Views
Last Modified: 2012-05-10
Hi. we're having an issue setting up failover connection for fortigate 200B firewall.

Currently we have 2 broadband connections which are connected to fortigate and we'd like to use our primary connection but if it fails, then fortigate would automatically switch to secondary connection. Problem is that even we have set correct priorities for connection, Fortigate uses automatically wrong connection as primary (dsl line with lower capacity) if both lines are connected.
0
Comment
Question by:wractale
  • 3
  • 3
6 Comments
 
LVL 4

Expert Comment

by:iworks-uworks
ID: 34205413
What firmware version are you running? Which connection do you have in each port? How do have the fail over setup?
0
 
LVL 2

Author Comment

by:wractale
ID: 34205480
Firmware: v4.0,build0291,100824 (MR2 Patch 2)

Currently main connection (fibre broadband) is connected to port 14
and ADSL (failover) is connected to port 9

We have 2 static routes, one for primary connection and one for secondary, primary has lower priority than secondary.

Is that right way to do failover for fortigate or?
0
 
LVL 4

Accepted Solution

by:
iworks-uworks earned 500 total points
ID: 34205758
Does your setup include the settings in both of these screen shots? What are you using on your WAN1 and WAN2 ports?
Failover1.PNG
Failover2.PNG
0
Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

 
LVL 2

Author Comment

by:wractale
ID: 34205844
Currently detect interface status for gateway isn't enabled. Should that be enabled for only primary connection?

Currently if we add both connections to forti, primary and secondary, it'll use secondary as default even if priority of its static route is larger.

Thanks.
0
 
LVL 4

Expert Comment

by:iworks-uworks
ID: 34206066
That is strange. Do you have anything using your WAN1 and WAN2? I've never tried a failover using other ports (while for most things it doesn't matter what ports you use), but are you able to change your main connection port to something lower than 9 to see if that is making a difference?

As for detecting the interface status, yes, check that box and maybe that will make the difference.
Make sure your ping server is reliable like a gateway IP.
0
 
LVL 2

Author Comment

by:wractale
ID: 34215391
Adding that detect interface status seemed to do it! Thanks!
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

Suggested Solutions

I have seen some questions on problems with SSH/telnet access to Cisco routers that may occur despite the fact that from a PC connected to your LAN, Internet connectivity is in place and users can access Internet sites without any issues.  There are…
Quality of Service (QoS) options are nearly endless when it comes to networks today. This article is merely one example of how it can be handled in a hub-n-spoke design using a 3-tier configuration.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now