Technical Tip: Differentiated services code point (DSCP) support for SD-WAN health check probe packets

Description

This article describes how SD-WAN Health-check packets are not DSCP marked by default and therefore end up in the default group.
They may potentially be dropped or de-referenced in favor of prioritized traffic.

Scope

FortiGate.

Solution

From v6.2.4 & 6.4.0, mark DSCP manually with the appropriate CLI configuration.

config system virtual-wan-link

    config health-check

        edit "Name"

            set diffservcode ? (<binary> 6 bits binary, range 000000-111111 )

        next

    end

DSCP / Binary /Decimal / IP Precedence Table.