Load Balancing & Fault Tolerance
Tunnel Routing
Source
:
The source of the connection (See "
").
IPv4 Address, IPv4 Range and IPv4 Subnet:
Specify the IPv4 Address, IPv4
Range or IPv4 Subnet that the traffic comes from to be filtered by this rule.
LAN:
To filter out the traffic that comes from LAN area.
DMZ:
To filter out the traffic that comes from DMZ area.
Fail-Over
:
Select a policy from the list. Once the tunnel group get failed (every single tunnel in
the tunnel group fails), traffic will be diverted based on Fail-Over policies.
NO-ACTION:
Traffic will not be diverted when the tunnel group get failed, and
transmission will get failed.
Auto Routing:
Traffic will be re-evaluated against Auto Routing's rules and
transferred according to the Auto Routing policies. Transmission gets failed if there is
no rule matches.
Tunnel: [Group Name]:
All the defined tunnel groups are listed for options. Traffic
will be diverted to the specified tunnel group here, however, the diverted traffic will
not be diverted again if the beck-up tunnel group is also failed. Note that it takes the
same action as "NO-ACTION" if a tunnel group that is the same as what this default
rule attached to is selected as back-up for fail-over here.
Considering the illustration above, a tunnel group (Tunnel Group AB) containing two tunnels (Tunnel 1 and Tunnel 2)
connects two FortiWAN units (FWN-A and FWN-B) that two internal networks connect respectively to. Configurations
of default rules on two sites are as follow:
Default rules sat on FWN-A
148
FortiWAN Handbook
Fortinet Technologies Inc.
