Description
This article describes how to send the VPN traffic over an alternate link.
Scope
It is necessary to properly configure both the routing and the firewall policies.
Solution
Routing Scenario:
- Main internet Traffic is to go out WAN1.
- Only VPN traffic is to go out WAN2.
- The remote gateway for the VPN tunnel is 64.247.233.250.
How to configure the static routes:
Route #1 is the normal default route for the main Internet connection.
Route #2 says to get to the External Interface of Remote Fortinet, use the gateway on WAN2.
Route #3 says to get to the remote subnet across the VPN, use the policies defined on Internal to WAN2.
How to configure firewall policies:
Internal to Wan1: Internal_All >> WAN1_All Accept Any
Internal to Wan2: Internal_Subnet >> 10.3.20.0 Encrypt
