Fortinet black logo

Interface configurations not imported

6.4.3
Copy Link
Copy Doc ID 9c48a92f-2612-11eb-96b9-00505692583a:74201
Download PDF

Interface configurations not imported

When adding a FortiGate to SD-WAN Orchestrator MEA, you choose what profile to apply. The profile settings include a First Online Action option that specifies how to manage the device configuration when the FortiGate comes online for the first time. When First Online Action is set to RETRIEVE_CONFIG, configuration settings from FortiGate are retrieved to SD-WAN Orchestrator MEA.

Before you install configuration changes to FortiGate, it is recommended to review the retrieved configuration and confirm what pre-configured settings were retrieved. Then you can adjust settings in the device configuration before clicking the Sync button to install configuration changes to FortiGate.

For example, the following conditions must be met for SD-WAN Orchestrator MEA to retrieve and retain pre-configured WAN interfaces on FortiGate:

  1. In the SD-WAN Orchestrator MEA profile assigned to FortiGate, the WAN interface must be enabled.
  2. In the SD-WAN Orchestrator MEA profile assigned to FortiGate, the mode for the WAN interface must be the same as the mode pre-configured for the WAN interface on FortiGate. For example, both must be set to static.
  3. If the WAN mode is static on FortiGate, an SD-WAN member configuration must exist on SD-WAN Orchestrator MEA and reference the WAN port, and the gateway IP must be set for the SD-WAN member.

Every enabled WAN interface in SD-WAN Orchestrator MEA generates an SD-WAN interface member configuration on FortiGate, and the gateway option is required when the mode is static. If gateway information doesn't exist in FortiGate, SD-WAN Orchestrator MEA does not retrieve the interface settings because the settings are considered incomplete and ignored.

Interface configurations not imported

When adding a FortiGate to SD-WAN Orchestrator MEA, you choose what profile to apply. The profile settings include a First Online Action option that specifies how to manage the device configuration when the FortiGate comes online for the first time. When First Online Action is set to RETRIEVE_CONFIG, configuration settings from FortiGate are retrieved to SD-WAN Orchestrator MEA.

Before you install configuration changes to FortiGate, it is recommended to review the retrieved configuration and confirm what pre-configured settings were retrieved. Then you can adjust settings in the device configuration before clicking the Sync button to install configuration changes to FortiGate.

For example, the following conditions must be met for SD-WAN Orchestrator MEA to retrieve and retain pre-configured WAN interfaces on FortiGate:

  1. In the SD-WAN Orchestrator MEA profile assigned to FortiGate, the WAN interface must be enabled.
  2. In the SD-WAN Orchestrator MEA profile assigned to FortiGate, the mode for the WAN interface must be the same as the mode pre-configured for the WAN interface on FortiGate. For example, both must be set to static.
  3. If the WAN mode is static on FortiGate, an SD-WAN member configuration must exist on SD-WAN Orchestrator MEA and reference the WAN port, and the gateway IP must be set for the SD-WAN member.

Every enabled WAN interface in SD-WAN Orchestrator MEA generates an SD-WAN interface member configuration on FortiGate, and the gateway option is required when the mode is static. If gateway information doesn't exist in FortiGate, SD-WAN Orchestrator MEA does not retrieve the interface settings because the settings are considered incomplete and ignored.