Fortinet white logo
Fortinet white logo

SD-WAN Deployment for MSSPs

Hub-to-Spoke sessions

Hub-to-Spoke sessions

In this section, we configure the Remote Health Probing feature, to intelligently steer sessions originated behind the Hub.

This topic includes reference configurations for the following components:

Spoke

  1. In the SD-WAN configuration, enable embedding of measured health information into the probes sent to the Hubs:

        config system sdwan
          config health-check
            edit "HUB"
              set embed-measured-health enable
            next
          end
        end

Hub

  1. In the SD-WAN configuration, create a new remote Health Check (specify all the overlay members):

        config system sdwan
          config health-check
            edit "EDGE"
              set detect-mode remote
              set members 2 3
              set sla-id-redistribute 1
              config sla
                edit 1
                  set link-cost-factor latency
                  set latency-threshold 100
                  set priority-in-sla 5
                  set priority-out-sla 8
                next
              end
            next
          end
        end
  2. In the BGP configuration, enable inheriting route priority during recursive resolution:

        config router bgp
          set recursive-inherit-priority enable
        end

Hub-to-Spoke sessions

Hub-to-Spoke sessions

In this section, we configure the Remote Health Probing feature, to intelligently steer sessions originated behind the Hub.

This topic includes reference configurations for the following components:

Spoke

  1. In the SD-WAN configuration, enable embedding of measured health information into the probes sent to the Hubs:

        config system sdwan
          config health-check
            edit "HUB"
              set embed-measured-health enable
            next
          end
        end

Hub

  1. In the SD-WAN configuration, create a new remote Health Check (specify all the overlay members):

        config system sdwan
          config health-check
            edit "EDGE"
              set detect-mode remote
              set members 2 3
              set sla-id-redistribute 1
              config sla
                edit 1
                  set link-cost-factor latency
                  set latency-threshold 100
                  set priority-in-sla 5
                  set priority-out-sla 8
                next
              end
            next
          end
        end
  2. In the BGP configuration, enable inheriting route priority during recursive resolution:

        config router bgp
          set recursive-inherit-priority enable
        end