Fortinet white logo
Fortinet white logo

Administration Guide

Configuring SD-WAN zones

Configuring SD-WAN zones

In order for us to steer traffic based on SD-WAN rules, first we need to configure SD-WAN interface members and assign them to SD-WAN zones. To know more about SD-WAN zones, refer to theSD-WAN zones section.

In our example, we created two SD-WAN zones. The virtual-wan-link SD-WAN zone for the underlay traffic passing through the Internet_A(port1) and Internet_B(port5) interfaces, and the Overlay SD-WAN zone for the overlay traffic passing through the Branch-HQ-A and Branch-HQ-B interfaces.

Verify the configurations on the Network > SD-WAN Zones screen:

SD-WAN Zones

Note

In the screenshot above, we have configured the Internet_A(port1) and Internet_B(port5) SD-WAN interface members with their Cost values being 0 and 10 respectively. A lower Cost value indicates that this member is the primary interface member, and is preferred more than a member with a higher Cost value when using the Lowest Cost (SLA) strategy.

We also need to configure a static route that points to the SD-WAN interface. To know more about static routes, refer to the Adding a static route section.

Configuring SD-WAN zones

Configuring SD-WAN zones

In order for us to steer traffic based on SD-WAN rules, first we need to configure SD-WAN interface members and assign them to SD-WAN zones. To know more about SD-WAN zones, refer to theSD-WAN zones section.

In our example, we created two SD-WAN zones. The virtual-wan-link SD-WAN zone for the underlay traffic passing through the Internet_A(port1) and Internet_B(port5) interfaces, and the Overlay SD-WAN zone for the overlay traffic passing through the Branch-HQ-A and Branch-HQ-B interfaces.

Verify the configurations on the Network > SD-WAN Zones screen:

SD-WAN Zones

Note

In the screenshot above, we have configured the Internet_A(port1) and Internet_B(port5) SD-WAN interface members with their Cost values being 0 and 10 respectively. A lower Cost value indicates that this member is the primary interface member, and is preferred more than a member with a higher Cost value when using the Lowest Cost (SLA) strategy.

We also need to configure a static route that points to the SD-WAN interface. To know more about static routes, refer to the Adding a static route section.