Monday, March 8, 2021

FortiGate SD-WAN

I have two ISPs and I want to configure Outbound Load Balancing using FG SD-WAN (Forti OS 6.4). Port 1 and Port 2 will be members of my SD-WAN Zone. My questions are about VIPs (Inbound NAT), and 3rd party VPN tunnels. Since the traffic will be load-balanced between port 1 and port 2 how will that impact my setup of a traditional Site to Site VPN to a 3rd party (non Fortigate device)? Will I be able to just terminate the VPN at port 1 or port 2 (as I would if I didn't run SD-WAN)? Will the NAT (aka VIP IP) work fine?



No comments:

Post a Comment