I have two WANs, wan1 and wan2. I want to always prefer sending out traffic on wan1, unless wan1 is down. What is the easiest way to configure that?
SD-WAN will be the best way to accomplish this in a simple and effective way.
Using SD-WAN, you can define wan1 and wan2 as members/zones in your SD-WAN. By adding a lower cost to wan1, you can use the lowest-cost strategy to prefer traffic to go out wan1.
Assuming you only need very simple routing, you can define your gateway during your SD-WAN member configurations, and the gateways will be added to the routing table.
On the other hand, set up Performance SLAs so that you can measure the health of both WANs. Then apply it in a SD-WAN rule using lowest cost strategy. If the health of wan1 falls below threshold, then SD-WAN will stop forwarding traffic to wan1 and start forwarding to wan2.
There is a SD-WAN quick-start guide you can follow:
Instead of balancing using the implicit rule, use the lowest cost strategy instead:
FortiAnswers is the space dedicated to FortiSASE and FortiOS questions and suggestions.
1 Person is following this question.
How do I decide which is the best SD-WAN strategy to use?
What certificate should I use for SSL Deep Inspection?
How can we block Facebook games while giving access to Facebook?
When using 3rd party authentication servers, how do I configure FortiOS to use its Captive Portal?