Fortinet black logo

Administration Guide

SD-WAN configuration portability

SD-WAN configuration portability

When configuring SD-WAN, adding interfaces to members is optional. This allows a configuration to be copied directly from one device to another, without requiring the devices to have interfaces with the same names.

After the configuration is pasted to the new device, add the interfaces to the new device to make it fully functional.

To copy the SD-WAN configuration from an existing spoke to a new spoke:
  1. Copy the configuration from the configured spoke:
    config system virtual-wan-link
        set status enable
        config members
            edit 1
                set interface "_OCVPN3-0.0"
            next
            edit 2
                set interface "_OCVPN3-0.1"
            next
        end
        config health-check
            edit "office"
                set server "office365.com"
                set protocol http
                set sla-fail-log-period 300
                set sla-pass-log-period 300
                set members 2 1
                config sla
                    edit 1
                        set latency-threshold 300
                        set jitter-threshold 200
                    next
                    edit 2
                        set link-cost-factor latency
                        set latency-threshold 20
                    next
                end
            next
            ...
        end
        config service
            edit 2
                set name "Office365"
                set mode sla
                set internet-service enable
                set internet-service-app-ctrl 327782
                config sla
                    edit "office"
                        set id 1
                    next
                end
                set priority-members 2 1
            next
            ...
        end
    end
  2. Paste the configuration onto the new spoke:
    config system virtual-wan-link
        set status enable
        config members
            edit 1
            next
            edit 2
            next
        end
        config health-check
            edit "office"
                set server "office365.com"
                set protocol http
                set sla-fail-log-period 300
                set sla-pass-log-period 300
                set members 2 1
                config sla
                    edit 1
                        set latency-threshold 300
                        set jitter-threshold 200
                    next
                    edit 2
                        set link-cost-factor latency
                        set latency-threshold 20
                    next
                end
            next
            ...
        end
        config service
            edit 2
                set name "Office365"
                set mode sla
                set internet-service enable
                set internet-service-app-ctrl 327782
                config sla
                    edit "office"
                        set id 1
                    next
                end
                set priority-members 2 1
            next
            ...
        end
    end

    The member interfaces are not copied over. Already configured interfaces are not unset. The member is disabled until an interface is configured.

  3. Configure the member interfaces on the new spoke:
    config system virtual-wan-link
        config members
            edit 1
                set interface "_OCVPN4-0.0"
            next
            edit 2
                set interface "_OCVPN4-0.1"
            next
        end
    end

    After the interfaces are configured, the new spoke will function like the other spokes.

SD-WAN configuration portability

When configuring SD-WAN, adding interfaces to members is optional. This allows a configuration to be copied directly from one device to another, without requiring the devices to have interfaces with the same names.

After the configuration is pasted to the new device, add the interfaces to the new device to make it fully functional.

To copy the SD-WAN configuration from an existing spoke to a new spoke:
  1. Copy the configuration from the configured spoke:
    config system virtual-wan-link
        set status enable
        config members
            edit 1
                set interface "_OCVPN3-0.0"
            next
            edit 2
                set interface "_OCVPN3-0.1"
            next
        end
        config health-check
            edit "office"
                set server "office365.com"
                set protocol http
                set sla-fail-log-period 300
                set sla-pass-log-period 300
                set members 2 1
                config sla
                    edit 1
                        set latency-threshold 300
                        set jitter-threshold 200
                    next
                    edit 2
                        set link-cost-factor latency
                        set latency-threshold 20
                    next
                end
            next
            ...
        end
        config service
            edit 2
                set name "Office365"
                set mode sla
                set internet-service enable
                set internet-service-app-ctrl 327782
                config sla
                    edit "office"
                        set id 1
                    next
                end
                set priority-members 2 1
            next
            ...
        end
    end
  2. Paste the configuration onto the new spoke:
    config system virtual-wan-link
        set status enable
        config members
            edit 1
            next
            edit 2
            next
        end
        config health-check
            edit "office"
                set server "office365.com"
                set protocol http
                set sla-fail-log-period 300
                set sla-pass-log-period 300
                set members 2 1
                config sla
                    edit 1
                        set latency-threshold 300
                        set jitter-threshold 200
                    next
                    edit 2
                        set link-cost-factor latency
                        set latency-threshold 20
                    next
                end
            next
            ...
        end
        config service
            edit 2
                set name "Office365"
                set mode sla
                set internet-service enable
                set internet-service-app-ctrl 327782
                config sla
                    edit "office"
                        set id 1
                    next
                end
                set priority-members 2 1
            next
            ...
        end
    end

    The member interfaces are not copied over. Already configured interfaces are not unset. The member is disabled until an interface is configured.

  3. Configure the member interfaces on the new spoke:
    config system virtual-wan-link
        config members
            edit 1
                set interface "_OCVPN4-0.0"
            next
            edit 2
                set interface "_OCVPN4-0.1"
            next
        end
    end

    After the interfaces are configured, the new spoke will function like the other spokes.