Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Failover solution for two ISPs

Posted on 2013-11-20
3
Medium Priority
?
296 Views
Last Modified: 2013-11-21
Hi,

I'm trying to figure out the best solution here. We have two ISPs providing Inet services for our org. One is to the the Primary line and the other is our secondary line. We would like to connect both lines to pair of Fortinet Firewalls (HA config). We have an option to configure the Fortinet's in either Active/Passive or Active/Active. They are currently setup in an Active/Active config. Each Fortinet (models: Fortinet 200D) has two WAN ports (WAN1 and WAN2). I have a number of servers that will be Inet facing (each with with Public IP assigned by my Primary ISPs IP block). My secondary ISP also has assigned up a block of external IP addresses as well. My question is during a failover scenario how does the failover happen exactly for the external IPs? I'm assuming DNS needs to be updated externally, but wondering how to configure it so that it happens automagically... hope this makes sense and appreciate any feedback from community!

Thanks
Rechi
0
Comment
Question by:ric11003
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 12

Accepted Solution

by:
Infamus earned 1500 total points
ID: 39663964
The best way is to use BGP but two ISP has to agree with the configuration.
0
 

Author Comment

by:ric11003
ID: 39664758
Thanks so much infamus. Really appreciate your feedback. Are you able to clarify the steps or config the two ISPs have to agree to exactly? I'm trying to figure out a solution that is the easiest to implement.
0
 
LVL 12

Expert Comment

by:Infamus
ID: 39665514
You will need to call back up ISP and tell them you need a failover solution.

There are different ways of configuring failover and they should have their preference.
0

Featured Post

Threat Trends for MSPs to Watch

See the findings.
Despite its humble beginnings, phishing has come a long way since those first crudely constructed emails. Today, phishing sites can appear and disappear in the length of a coffee break, and it takes more than a little know-how to keep your clients secure.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

PRTG Network Monitor lets you monitor your bandwidth usage, so you know who is using up your bandwidth, and what they're using it for.
Use of TCL script on Cisco devices:  - create file and merge it with running configuration to apply configuration changes
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

722 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question