<div>
I think this document will help<br />
<a href="http://docs.fortinet.com/uploaded/files/1951/using-a-WAN-link-interface-for-redundant-Internet-connections.pdf" rel="ugc">http://docs.fortinet.com/uploaded/files/1951/using-a-WAN-link-interface-for-redundant-Internet-connections.pdf</a>
</div>


I think this document will help
http://docs.fortinet.com/uploaded/files/1951/using-a-WAN-link-interface-for-redundant-Internet-connections.pdf [http://docs.fortinet.com/uploaded/files/1951/using-a-WAN-link-interface-for-redundant-Internet-connections.pdf]

<div>
arnold,<br />
<br />
Works like a charm. The trick is to set the Policy Route poiting each VLAN to the WAN link that you want. I made the tests &nbsp; removing the cable of WAN ALPHA, and all the vlans became to use the WAN BETA. And also, if you have the two WANs connected and you remove the WAN BETA cable, VLAN 30 and 40 pass to use the WAN ALPHA and if you plug the WAN BETA again, VLAN 30 and 40 back to use the WAN BETA.<br />
<br />
Its very import to remember set different distances for each static routing of each WAN. In my case I set the WAN ALPHA as 10 and WAN BETA as 50.<br />
<br />
Thanks a lot!
</div>


arnold,

Works like a charm. The trick is to set the Policy Route poiting each VLAN to the WAN link that you want. I made the tests   removing the cable of WAN ALPHA, and all the vlans became to use the WAN BETA. And also, if you have the two WANs connected and you remove the WAN BETA cable, VLAN 30 and 40 pass to use the WAN ALPHA and if you plug the WAN BETA again, VLAN 30 and 40 back to use the WAN BETA.

Its very import to remember set different distances for each static routing of each WAN. In my case I set the WAN ALPHA as 10 and WAN BETA as 50.

Thanks a lot!

<div>
<div class="content wysiwyg-content">
I would like to know if is possible to make the scenario of the images bellow on my firewall Fortinet that has 2 WAN ports. I want to vlan 10 and 20 to pass throught the WAN ALPHA and vlan 30 and 40 to WAN BETA, and when the WAN ALPHA fails all the internet traffic goes to WAN BETA.<br />
<br />
So it is two things to do: divide the vlans on each link and make the redundancy for vlan 10 + 20 to WAN BETA.<br />
<br />
Is this possible?<br />
<br />
<a href="https://filedb.experts-exchange.com/incoming/2015/03_w11/902869/ex1.png" target="_blank" title="ex1.png (50 KB)"><img alt="ex1.png" class="file-block lazyload" style="max-width: 701px;" data-src="https://filedb.experts-exchange.com/incoming/2015/03_w11/902869/ex1.png" /></a><a href="https://filedb.experts-exchange.com/incoming/2015/03_w11/902870/ex2.png" target="_blank" title="ex2.png (51 KB)"><img alt="ex2.png" class="file-block lazyload" style="max-width: 737px;" data-src="https://filedb.experts-exchange.com/incoming/2015/03_w11/902870/ex2.png" /></a>
</div>
</div>


ex1.png

ex2.png

I would like to know if is possible to make the scenario of the images bellow on my firewall Fortinet that has 2 WAN ports. I want to vlan 10 and 20 to pass throught the WAN ALPHA and vlan 30 and 40 to WAN BETA, and when the WAN ALPHA fails all the internet traffic goes to WAN BETA.

So it is two things to do: divide the vlans on each link and make the redundancy for vlan 10 + 20 to WAN BETA.

Is this possible?




Dividing VLANs to differente WANs on the same firewall?

Hardware-based firewalls provide more sophisticated protection for inbound and outbound traffic than the simple Windows software firewall or the basic NAT firewalls found in routers. These devices implement techniques such as stateful packet inspection, deep packet inspection, and content filtering; and may include built-in antivirus and anti-malware protection.

Hardware Firewalls

Network design and methodology, also known as network architecture, is the design of a communication network. It is a framework for the specification of a network's physical components and their functional organization and configuration, its operational principles and procedures, as well as data formats used in its operation. In telecommunication, the specification of a network architecture may also include a detailed description of products and services delivered via a communications network, as well as detailed rate and billing structures under which services are compensated.