Fortinet black logo

Administration Guide

SD-WAN CLI configuration

SD-WAN CLI configuration

The following SD-WAN CLI configuration commands are used to configure ADVPN 2.0 on the spokes:

config system sdwan
    config zone
        edit <zone-name>
            set advpn-select {enable | disable}
            set advpn-health-check <health-check name>   
        next
    end
    config members
        edit <integer>
            set transport-group <integer> 
        next
    end
    config service
        edit <integer>
            set shortcut-priority {enable | disable | auto}   
        next
    end
end

set advpn-select {enable | disable}

Enable or disable SDWAN/ADVPN-2.0 (default=disabled).

set advpn-health-check <health-check name>

Specify the health check for the spoke whose info will be sent to the peer spoke.

set transport-group <integer>

Specify different group ID between (1 -255) to differentiate link-type, such as Internet, MPLS, LTE, Satellite.

set shortcut-priority {enable | disable | auto}

Enable or disable making ADVPN shortcut a high priority over overlay parent interfaces, if SLA mode or link cost factor mode conditions are met:

  • enable: enable a high priority of ADVPN shortcut for this service.

  • disable: disable a high priority of ADVPN shortcut for this service.

  • auto: automatically enable a high priority of ADVPN shortcut for this service if ADVPN2.0 is enabled.

diagnose sys sdwan advpn-session

Diagnostic command run on local spoke to view remote spoke WAN link information and path manager shortcut path selection.

As with the previous version of ADVPN, on the hub, you must enable ADVPN and configure firewall policies between spokes.

Note

Currently, ADVPN 2.0 only supports IPv4.

SD-WAN CLI configuration

The following SD-WAN CLI configuration commands are used to configure ADVPN 2.0 on the spokes:

config system sdwan
    config zone
        edit <zone-name>
            set advpn-select {enable | disable}
            set advpn-health-check <health-check name>   
        next
    end
    config members
        edit <integer>
            set transport-group <integer> 
        next
    end
    config service
        edit <integer>
            set shortcut-priority {enable | disable | auto}   
        next
    end
end

set advpn-select {enable | disable}

Enable or disable SDWAN/ADVPN-2.0 (default=disabled).

set advpn-health-check <health-check name>

Specify the health check for the spoke whose info will be sent to the peer spoke.

set transport-group <integer>

Specify different group ID between (1 -255) to differentiate link-type, such as Internet, MPLS, LTE, Satellite.

set shortcut-priority {enable | disable | auto}

Enable or disable making ADVPN shortcut a high priority over overlay parent interfaces, if SLA mode or link cost factor mode conditions are met:

  • enable: enable a high priority of ADVPN shortcut for this service.

  • disable: disable a high priority of ADVPN shortcut for this service.

  • auto: automatically enable a high priority of ADVPN shortcut for this service if ADVPN2.0 is enabled.

diagnose sys sdwan advpn-session

Diagnostic command run on local spoke to view remote spoke WAN link information and path manager shortcut path selection.

As with the previous version of ADVPN, on the hub, you must enable ADVPN and configure firewall policies between spokes.

Note

Currently, ADVPN 2.0 only supports IPv4.