Fortinet Document Library

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:


Table of Contents

Administration Guide

SD-WAN zones and interface members

For each device, you can create SD-WAN zones and interface members. You can select SD-WAN zones as source and destination interfaces in firewall policies. You cannot select interface members of SD-WAN zones in firewall policies.

The default SD-WAN zone is named virtual-wan-link.

To create an SD-WAN zone:
  1. Go to the device database. See Displaying the device database.
  2. In the device database, go to System > SD-WAN.

    The SD-WAN pane opens.

  3. In the Interface Members section, click Create New > SD-WAN Zone.

    The Create New SD-WAN Zone dialog box is displayed.

  4. In the Name box, type a name for the zone.
  5. Click the Interface Members box.

    The list of interfaces is displayed.

  6. Select the interfaces to be members of the zone, and click OK.
  7. (Optional) Expand the Advanced Options, and set them.
  8. Hover the mouse over each advanced option to view a description of the option.

  9. Click OK to finish creating the zone.
  10. Click Apply to save the SD-WAN settings.
To create an SD-WAN interface member:
  1. Go to the device database. See Displaying the device database.
  2. In the device database, go to System > SD-WAN.

    The SD-WAN pane opens.

  3. In the Interface Members section, click Create New > SD-WAN Member.

    The Create New SD-WAN Interface Member dialog box is displayed.

  4. Set the options, and click OK.

    The interface is added to the zone.

  5. Click Apply to save the SD-WAN settings.

SD-WAN zones and interface members

For each device, you can create SD-WAN zones and interface members. You can select SD-WAN zones as source and destination interfaces in firewall policies. You cannot select interface members of SD-WAN zones in firewall policies.

The default SD-WAN zone is named virtual-wan-link.

To create an SD-WAN zone:
  1. Go to the device database. See Displaying the device database.
  2. In the device database, go to System > SD-WAN.

    The SD-WAN pane opens.

  3. In the Interface Members section, click Create New > SD-WAN Zone.

    The Create New SD-WAN Zone dialog box is displayed.

  4. In the Name box, type a name for the zone.
  5. Click the Interface Members box.

    The list of interfaces is displayed.

  6. Select the interfaces to be members of the zone, and click OK.
  7. (Optional) Expand the Advanced Options, and set them.
  8. Hover the mouse over each advanced option to view a description of the option.

  9. Click OK to finish creating the zone.
  10. Click Apply to save the SD-WAN settings.
To create an SD-WAN interface member:
  1. Go to the device database. See Displaying the device database.
  2. In the device database, go to System > SD-WAN.

    The SD-WAN pane opens.

  3. In the Interface Members section, click Create New > SD-WAN Member.

    The Create New SD-WAN Interface Member dialog box is displayed.

  4. Set the options, and click OK.

    The interface is added to the zone.

  5. Click Apply to save the SD-WAN settings.