Solved

Failover solution for two ISPs

Posted on 2013-11-20
3
269 Views
Last Modified: 2013-11-21
Hi,

I'm trying to figure out the best solution here. We have two ISPs providing Inet services for our org. One is to the the Primary line and the other is our secondary line. We would like to connect both lines to pair of Fortinet Firewalls (HA config). We have an option to configure the Fortinet's in either Active/Passive or Active/Active. They are currently setup in an Active/Active config. Each Fortinet (models: Fortinet 200D) has two WAN ports (WAN1 and WAN2). I have a number of servers that will be Inet facing (each with with Public IP assigned by my Primary ISPs IP block). My secondary ISP also has assigned up a block of external IP addresses as well. My question is during a failover scenario how does the failover happen exactly for the external IPs? I'm assuming DNS needs to be updated externally, but wondering how to configure it so that it happens automagically... hope this makes sense and appreciate any feedback from community!

Thanks
Rechi
0
Comment
Question by:ric11003
  • 2
3 Comments
 
LVL 12

Accepted Solution

by:
Infamus earned 500 total points
ID: 39663964
The best way is to use BGP but two ISP has to agree with the configuration.
0
 

Author Comment

by:ric11003
ID: 39664758
Thanks so much infamus. Really appreciate your feedback. Are you able to clarify the steps or config the two ISPs have to agree to exactly? I'm trying to figure out a solution that is the easiest to implement.
0
 
LVL 12

Expert Comment

by:Infamus
ID: 39665514
You will need to call back up ISP and tell them you need a failover solution.

There are different ways of configuring failover and they should have their preference.
0

Featured Post

6 Surprising Benefits of Threat Intelligence

All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

Join & Write a Comment

The use of stolen credentials is a hot commodity this year allowing threat actors to move laterally within the network in order to avoid breach detection.
Is your computer hacked? learn how to detect and delete malware in your PC
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now