Fortigate: Set up the Health Link Monitor

Health Link Monitor (as known as dead gateway detection) is used to for multiple WAN setup to monitor the status of the links and force a failover if necessary.

Set up the Health Link Monitor and configure ping servers

The following will ping a server of your choice, and if it stops receiving replies at the set rate, it will pull the static
route from the routing table and the secondary connection will be used.

Go to Router > Static > Settings > and click “Create New”.

Name: Wan1 Failover
Interface: wan1
Gateway: 209.200.40.1
Server: 8.8.8.8

Name: Wan2 Failover
Interface: wan1
Gateway: 156.100.20.1
Server: 8.8.8.8

Uncheck the “Bring Down (Up) interfaces” checkbox, and leave the other settings default.

Notes:

  • The “Bring Down (Up) interfaces” will bring down an interface that is already up, when the interface you are monitoring goes down.
  • For example, if wan1 went down, you can bring down your dmz interface at the same time.Health_Link_Monitor.png

The equivalent configuration in the CLI is as follows:

config system link-monitor
edit “Wan1 Failover”
set srcintf “wan1”
set server “8.8.8.8”
set gateway-ip 209.200.40.1
set update-cascade-interface disable
next
edit “Wan2 Failover”
set srcintf “wan2”
set server “8.8.8.8”
set gateway-ip 156.100.20.1
set update-cascade-interface disable
end

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

w

Connecting to %s