Load Balancing & Fault Tolerance Tunnel Routing
Local Host ID: Branch2
Tunnel Group
Group Name Remote Host
ID
Algorithm Tunnels
Local IP Remote IP Weight
Branch2-HQ HQ Round-Robin 2.2.2.2 3.3.3.3 1
Routing Rules
Source Destination Service Group Fail-Over
192.168.2.0/255.255.255.0 192.168.1.0/255.255.255.0 Any Branch2-HQ No-Action
Example 4: Central Routing of Tunnel Routing
A company operates two branch offices oversea. Intranet is established throughout the three locations, but the branch
1 does not have any public links to the internet and uses tunnel routing to connect to the internet via the WAN in the
headquarters. The branch 2 uses a public WAN link for internet. In the event of WAN link failure, the tunnel between
branch 2 and headquarters office will be the backup line for internet connection.
160 FortiWAN Handbook
Fortinet Technologies Inc.