Example 2
The auto routing policies to be established accordingly:
- Always route connections through WAN#1 (fixed algorithm). 2. Always route connections through WAN#2 (fixed algorithm).
- Always route connections through WAN#3 (fixed algorithm).
- Route connections evenly among the three WAN links with “Round-Robin”.
- Route connections through the three WAN links by “Round-Robin” with weight ratio WAN#1:WAN#2:WAN#3 = 1:2:3. Note: if there are six connections to be established, the first connection will be routed through WAN#1, the second and third through WAN#2, and the last three through WAN#3.
- Route connections through WAN#1 and WAN#2 depending on the bandwidth left in the downstream traffic of each WAN link.
- Route connections through WAN#2 and WAN#3 depending on the bandwidth left in the total traffic of each WAN link.
Label | Algorithm | Parameter |
WAN1 | Fixed | Check WAN #1 |
WAN2 | Fixed | Check WAN #2 |
WAN3 | Fixed | Check WAN #3 |
Round-Robin 1:1:1 | Round-Robin | Enter “1” for WAN #1, WAN #2, and
WAN #3 |
Round-Robin 1:2:3 | Round-Robin | Enter “1” for WAN #1, “2” for WAN #2, “3” for WAN #3 |
By Downstream | By Downstream | Check both WAN #1 and WAN #2 |
By Total | By Total Traffic | Check both WAN #2 and WAN #3 |
Defining filters for the following:
- The connections from 192.168.0.100 to FTP 210.10.10.11 are routed by the policy “WAN3”. If WAN #3 fails, they will be routed by policy “by Downstream”.
- The connections from sub-network 192.168.10.0/24 to web servers on the internet are routed by the policy “Round-Robin1:1:1”.
- The connections from 192.168.0.100~192.168.0.200 to sub-network 192.192.0.0/24 on TCP port 8000 are routed by the policy “WAN2”. If WAN #2 fails, they will be routed by the policy “WAN3”.
- The connections from the LAN to the Internet are routed by the policy “by Downstream”. If both WAN #1 and WAN #2 fail, they will be routed by “WAN3”.
- The connections from 211.21.48.196 to FTP 210.10.10.11 are routed by policy “Round-Robin1:2:3”.
- The connections from 211.21.48.195 to any SMTP server on the internet are routed by policy “WAN3”. If WAN #3 fails, they will be routed by “WAN3”. Note: In this case, the host at 211.21.48.195 will not be able to establish connections to any SMTP server on the internet when WAN #3 fails, even though some other WAN links still keep alive. For more details, refer to “Fail-over” policy.
- The connections from DMZ to the internet are routed by policy “By Downstream”. If both WAN #1 and WAN #2 fail, it will be routed by “By Total”. Note: Usually, when both WAN #1 and WAN #2 fail, fail-over policy will take effect. Somehow in the case above when both WAN links fail, then all traffic will be routed to WAN #3.
- The connections from an arbitrary host to the hosts at 60.200.10.1~60.200.10.10 will be routed by policy “WAN2”. If WAN #2 fails, they will be routed by “WAN1”.
- The connections from an arbitrary host to any host on the Internet will be routed by the policy “by Downstream”.
See also
- WAN Link Health Detection l Configuring your WAN
- Load Balancing & Fault Tolerance l Busyhour Settings l Using the web UI
Pages: 1 2
Hi,
Can Fortiwan control incoming traffic to route into different static IP instead of using IP configured in WAN interface. I have IPSEC VPN use 10.2.2.1 as gateway (mapped to wan IP in firewall Interface). Outgoing VPN traffic used 10.2.2.1 but incoming will come thru 10.2.2.4. Do Fortiwan has feature to force incoming vpn traffic to come in thru 10.2.2.1 ?