Home Security How to add static route point to PPPoE interface on Fortigate with...

How to add static route point to PPPoE interface on Fortigate with WAN failover

SHARE

How to add static route point to PPPoE interface on Fortigate with WAN failover

When an interface has some form of changing IP address (DDNS, PPPoE, or DHCP assigned address), routing needs special attention. The standard static route cannot handle the changing IP address. The solution is to use the dynamic-gateway command in the CLI. Say for example you already have four static routes, and you have a PPPoE connection over the wan2 interface and you want to use that as your default route.

The route is configured on the dynamic address VPN peer trying to access the static address FortiGate unit.

If you want to create static route on PPPoE on WAN 1 or WAN 2 and you have failover (Load balancing with FG) you need this command to Configure dynamic gateway routing via CLI on fortigate unit:

config router static edit 5 set dynamic-gateway enable end

*You cant do dynamic-gateway via GUI – its only available in CLI.

After the change you dont need to reboot your unit.

 

This is example of static route on WAN1 and WAN2 (PPPOE with dynamic-gateway)

 

P.s. Tasted on FortiOS 5.2.x and FortiGate 60C.

Some documentation:

kb.fortinet.com/kb/viewContent.do?externalId=FD32103

kb.fortinet.com/kb/documentLink.do?externalID=FD36462
kb.fortinet.com/kb/documentLink.do?externalID=100116

help.fortinet.com/fos50hlp/54/Content/FortiOS/fortigate-ipsecvpn-54/Dynamic_DNS_Config/dynamicDNS.htm

forum.fortinet.com/tm.aspx?m=156709

 

For more info just visit my page www.securityinet.com/

 

The post How to add static route point to PPPoE interface on Fortigate with WAN failover appeared first on Tech News and Cyber Security Updates.

This article is licensed under a Creative Commons Attribution 3.0 Unported License. Click here to view source



  • SHARE
    This account is used by several people to post. We are Anonymous. We are Legion. We do not forgive. We do not forget. Expect us.

    LEAVE A REPLY

    Please enter your comment!
    Please enter your name here