FortiGate IPsec ADVPN with SDWAN and Dual ISPs

This tutorial teaches how to configure Auto-Discovery IPsec VPN with SDWAN where each location has two ISP connections.

Contents of this video
00:00 Introduction
On the Hub
00:57 Configure SDWAN Zone
02:10 Customize VPN Tunnels
03:16 Configure Firewall Policies
04:17 Configure VPN Tunnel IP Address
05:02 Configure iBGP
On Spoke 1
06:31 Configure SDWAN Zone
07:45 Customize VPN Tunnels
08:30 Configure Firewall Policies
09:28 Configure VPN Tunnel IP Address
On Spoke 2
10:15 Configure SDWAN Zone
11:15 Customize VPN Tunnels
11:55 Configure Firewall Policies
12:40 Configure VPN Tunnel IP Address
On Spoke 1
13:19 Configure iBGP
On Spoke 2
14:35 Configure iBGP
On Hub
15:58 Configure SDWAN Performance SLAs
17:28 Configure SDWAN Rules
On Spoke 1
18:30 Configure SDWAN Performance SLAs
19:45 Configure SDWAN Rules
On Spoke 2
20:47 Configure SDWAN Performance SLAs
21:48 Configure SDWAN Rules
On Hub and Spokes
23:00 Enable ECMP

For information about the setup in VMware Workstation, go to https://drive.google.com/file/d/1V2hg...

In case you are getting the Error '-9999' when changing remote gateway type of an IPsec tunnel, see the following link https://community.fortinet.com/t5/For...

If you have any questions or need further assistance, please feel free to leave a comment below. Don’t forget to subscribe to our channel for more helpful tutorials.