Fortinet black logo

Admin Guide (Standalone)

Check SD-WAN health

Copy Link
Copy Doc ID 6d58dedc-fc57-11eb-8f3f-00505692583a:474414
Download PDF

Check SD-WAN health

A hmon.hchk is required for VWAN member status checking or health checking. Identify a server on the Internet and determine how the VWAN verifies that FortiExtender can communicate with it.

Example SD-WAN health check configuration:

The following commands are used to define a vwan_health_check and use it to perform health check for the VWAN member, member1.

config hmon hchk
    edit vwchk1
        set protocol ping
        set interval 5
        set probe-cnt 1
        set probe-tm 2
        set probe-target 8.8.8.8
        set interface fcs-0-phase-1
        set src-type interfce
        set src-iface nas1
        set filter rtt loss
    next
    edit vwchk2
        set protocol ping
        set interval 5
        set probe-cnt 1
        set probe-tm 2
        set probe-target 8.8.8.8
        set interface fcs-1-phase-1
        set src-type interfce
        set src-iface nas1
        set filter rtt loss
    next
end

You can use the “get hmon hchk vwan.<vwan_member_name>” command to show the latest statistics that the system has captured.

For every round of measurement, HMON first sends several packets. It then sorts the different round -trip times, and selects the median.

The output shows the following values:

  • avg, max, min, now—average, maximum, minimum, current median
  • sd—standard deviation of the median
  • am/s—ratio of the average median vs. the standard deviation
Example health check output
FFX04DA5918000098 # get hmon hchk vwchk1
    median rtt:       avg      max      min      now       sd     am/s
 fcs-0-phase-1:  182.23ms 182.47ms 182.00ms 182.00ms   0.24ms    775.3
   packet loss:       avg      max      min      now
 fcs-0-phase-1:        0%       0%       0%       0%

Check SD-WAN health

A hmon.hchk is required for VWAN member status checking or health checking. Identify a server on the Internet and determine how the VWAN verifies that FortiExtender can communicate with it.

Example SD-WAN health check configuration:

The following commands are used to define a vwan_health_check and use it to perform health check for the VWAN member, member1.

config hmon hchk
    edit vwchk1
        set protocol ping
        set interval 5
        set probe-cnt 1
        set probe-tm 2
        set probe-target 8.8.8.8
        set interface fcs-0-phase-1
        set src-type interfce
        set src-iface nas1
        set filter rtt loss
    next
    edit vwchk2
        set protocol ping
        set interval 5
        set probe-cnt 1
        set probe-tm 2
        set probe-target 8.8.8.8
        set interface fcs-1-phase-1
        set src-type interfce
        set src-iface nas1
        set filter rtt loss
    next
end

You can use the “get hmon hchk vwan.<vwan_member_name>” command to show the latest statistics that the system has captured.

For every round of measurement, HMON first sends several packets. It then sorts the different round -trip times, and selects the median.

The output shows the following values:

  • avg, max, min, now—average, maximum, minimum, current median
  • sd—standard deviation of the median
  • am/s—ratio of the average median vs. the standard deviation
Example health check output
FFX04DA5918000098 # get hmon hchk vwchk1
    median rtt:       avg      max      min      now       sd     am/s
 fcs-0-phase-1:  182.23ms 182.47ms 182.00ms 182.00ms   0.24ms    775.3
   packet loss:       avg      max      min      now
 fcs-0-phase-1:        0%       0%       0%       0%