Introduction
FortiOS 7.2.4 and later includes a Fabric Overlay Orchestrator feature, which is an easy-to-use GUI wizard that simplifies the process of configuring a self-orchestrated SD-WAN overlay within a single Security Fabric. This feature is self-orchestrated since no additional tool or device, aside from the FortiGates themselves, is required to orchestrate this configuration.
Currently, the Fabric Overlay Orchestrator supports a single hub architecture and builds upon an existing Security Fabric configuration. This feature configures the root FortiGate as the SD-WAN overlay hub and the downstream first-level FortiGates as the spokes.
After configuring the Fabric overlay, you can complete the SD-WAN deployment by configuring SD-WAN rules.
If you cannot view the VPN > Fabric Overlay Orchestrator tree menu, configure the FortiGate as a root or a downstream device in the Security Fabric. See Configuring the root FortiGate and downstream FortiGates in the FortiOS Administration Guide for details. |
The Fabric Overlay Orchestrator does not work when VDOM mode is enabled. |
This document covers the step-by-step procedures required to use the Fabric Overlay Orchestrator to deploy the Fortinet Secure SD-WAN solution to a single Security Fabric and configure a single hub architecture.
The architecture, components, and technology referenced in this document are covered in the Single datacenter (active-passive gateway) section of the SD-WAN Architecture for Enterprise guide.
For additional information and documentation about the topics covered in this document, please see the Fortinet Document Library at https://docs.fortinet.com.
This section contains the following topics: