Fortinet Document Library

Version:

Version:

Version:

Version:


Table of Contents

Administration Guide

Download PDF
Copy Link

Configuring SD-WAN zones

In order for us to steer traffic based on SD-WAN rules, first we need to configure SD-WAN interface members and assign them to SD-WAN zones. For more information about SD-WAN zones, see SD-WAN zones.

In our example, we created two SD-WAN zones. The virtual-wan-link SD-WAN zone for the underlay traffic passing through the Internet_A(port1) and Internet_B(port5) interfaces, and the Overlay SD-WAN zone for the overlay traffic passing through the Branch-HQ-A and Branch-HQ-B interfaces.

Go to Network > SD-WAN and select the SD-WAN Zones tab to verify the configurations.

SD-WAN Zones

In this screenshot, we have configured the Internet_A(port1) and Internet_B(port5) SD-WAN interface members with their Cost values being 0 and 10 respectively. A lower Cost value indicates that this member is the primary interface member, and is preferred more than a member with a higher Cost value when using the Lowest Cost (SLA) strategy.

We also need to configure a static route that points to the SD-WAN interface. For more information static routes, see Adding a static route.

Configuring SD-WAN zones

In order for us to steer traffic based on SD-WAN rules, first we need to configure SD-WAN interface members and assign them to SD-WAN zones. For more information about SD-WAN zones, see SD-WAN zones.

In our example, we created two SD-WAN zones. The virtual-wan-link SD-WAN zone for the underlay traffic passing through the Internet_A(port1) and Internet_B(port5) interfaces, and the Overlay SD-WAN zone for the overlay traffic passing through the Branch-HQ-A and Branch-HQ-B interfaces.

Go to Network > SD-WAN and select the SD-WAN Zones tab to verify the configurations.

SD-WAN Zones

In this screenshot, we have configured the Internet_A(port1) and Internet_B(port5) SD-WAN interface members with their Cost values being 0 and 10 respectively. A lower Cost value indicates that this member is the primary interface member, and is preferred more than a member with a higher Cost value when using the Lowest Cost (SLA) strategy.

We also need to configure a static route that points to the SD-WAN interface. For more information static routes, see Adding a static route.