Fortinet black logo

Introduction

7.2.0
Copy Link
Copy Doc ID 7bd1ced5-ad4d-11ed-8e6d-fa163e15d75b:503190
Download PDF

Introduction

FortiOS 7.2.4 and later includes a Fabric Overlay Orchestrator feature, which is an easy-to-use GUI wizard that simplifies the process of configuring a self-orchestrated SD-WAN overlay within a single Security Fabric. This feature is self-orchestrated since no additional tool or device, aside from the FortiGates themselves, is required to orchestrate this configuration.

Currently, the Fabric Overlay Orchestrator supports a single hub architecture and builds upon an existing Security Fabric configuration. This feature configures the root FortiGate as the SD-WAN overlay hub and the downstream first-level FortiGates as the spokes.

After configuring the Fabric overlay, you can complete the SD-WAN deployment by configuring SD-WAN rules.

Note

If you cannot view the VPN > Fabric Overlay Orchestrator tree menu, configure the FortiGate as a root or a downstream device in the Security Fabric. See Configuring the root FortiGate and downstream FortiGates in the FortiOS Administration Guide for details.

Note

The Fabric Overlay Orchestrator does not work when VDOM mode is enabled.

This document covers the step-by-step procedures required to use the Fabric Overlay Orchestrator to deploy the Fortinet Secure SD-WAN solution to a single Security Fabric and configure a single hub architecture.

The architecture, components, and technology referenced in this document are covered in the Single datacenter (active-passive gateway) section of the SD-WAN Architecture for Enterprise guide.

For additional information and documentation about the topics covered in this document, please see the Fortinet Document Library at https://docs.fortinet.com.

This section contains the following topics:

Introduction

FortiOS 7.2.4 and later includes a Fabric Overlay Orchestrator feature, which is an easy-to-use GUI wizard that simplifies the process of configuring a self-orchestrated SD-WAN overlay within a single Security Fabric. This feature is self-orchestrated since no additional tool or device, aside from the FortiGates themselves, is required to orchestrate this configuration.

Currently, the Fabric Overlay Orchestrator supports a single hub architecture and builds upon an existing Security Fabric configuration. This feature configures the root FortiGate as the SD-WAN overlay hub and the downstream first-level FortiGates as the spokes.

After configuring the Fabric overlay, you can complete the SD-WAN deployment by configuring SD-WAN rules.

Note

If you cannot view the VPN > Fabric Overlay Orchestrator tree menu, configure the FortiGate as a root or a downstream device in the Security Fabric. See Configuring the root FortiGate and downstream FortiGates in the FortiOS Administration Guide for details.

Note

The Fabric Overlay Orchestrator does not work when VDOM mode is enabled.

This document covers the step-by-step procedures required to use the Fabric Overlay Orchestrator to deploy the Fortinet Secure SD-WAN solution to a single Security Fabric and configure a single hub architecture.

The architecture, components, and technology referenced in this document are covered in the Single datacenter (active-passive gateway) section of the SD-WAN Architecture for Enterprise guide.

For additional information and documentation about the topics covered in this document, please see the Fortinet Document Library at https://docs.fortinet.com.

This section contains the following topics: