Configuring Fortigates to use new MPLS connection instead of VPN over WAN connections
Hello,
I am trying to figure out how to configure my FortiGate units at my Main Office location and my branch office location to use a new MPLS connection and remove the VPN connection that was setup using the WAN connections in both locations. I would like to move the traffic between the locations across the new MPLS connection, and all other traffic (internet, email, etc) out the WAN1 internet ports. It is a managed MPLS connection setup with an IP Address inside the LAN subnets on each end. Currently I have a server on each end set up with a static IP inside the subnet on each end with the gateway on each server pointing to the IP Address on the managed routers for the MPLS for each end and I can ping across from both directions successfully so I know the line is working correctly.
My main office location has a Fortigate 110C that has two WAN ports and eight internal ports.
My main internet connection is plugged into the WAN1 port and my current VPN created in the FortiGate unit is setup using this port to make a connection to the remote site.
My branch office location has a FortiGate 60C that has two WAN ports and five internal ports.
My main internet connection is plugged into the WAN1 port and my VPN is using this connection to connect to the main office.
My question is can I use the WAN2 ports on each end to use the MPLS line or will I need to plug them into an internal port and create static routes to move the traffic between locations?
I am not sure how to address this issue since the IP Addresses on the managed routers for the MPLS are inside my LAN subnets.
Main Office FortiGate 110C
Lan 10.1.0.x/24
MPLS IP 10.1.0.10/24
Gateway 10.1.0.1/24
Branch Office FortiGate 60C
Lan 10.100.0.x/24
MPLS IP 10.100.0.10/24
Gateway 10.100.0.1/24
I will appreciate any and all help that comes my way.
Thanks,
Wes
I am trying to figure out how to configure my FortiGate units at my Main Office location and my branch office location to use a new MPLS connection and remove the VPN connection that was setup using the WAN connections in both locations. I would like to move the traffic between the locations across the new MPLS connection, and all other traffic (internet, email, etc) out the WAN1 internet ports. It is a managed MPLS connection setup with an IP Address inside the LAN subnets on each end. Currently I have a server on each end set up with a static IP inside the subnet on each end with the gateway on each server pointing to the IP Address on the managed routers for the MPLS for each end and I can ping across from both directions successfully so I know the line is working correctly.
My main office location has a Fortigate 110C that has two WAN ports and eight internal ports.
My main internet connection is plugged into the WAN1 port and my current VPN created in the FortiGate unit is setup using this port to make a connection to the remote site.
My branch office location has a FortiGate 60C that has two WAN ports and five internal ports.
My main internet connection is plugged into the WAN1 port and my VPN is using this connection to connect to the main office.
My question is can I use the WAN2 ports on each end to use the MPLS line or will I need to plug them into an internal port and create static routes to move the traffic between locations?
I am not sure how to address this issue since the IP Addresses on the managed routers for the MPLS are inside my LAN subnets.
Main Office FortiGate 110C
Lan 10.1.0.x/24
MPLS IP 10.1.0.10/24
Gateway 10.1.0.1/24
Branch Office FortiGate 60C
Lan 10.100.0.x/24
MPLS IP 10.100.0.10/24
Gateway 10.100.0.1/24
I will appreciate any and all help that comes my way.
Thanks,
Wes
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER