Technical Tip: How to trace-route using the SD-WAN interface
Description
This article describes how to trace-route using the SD-WAN interface.
Scope
FortiGate v7.0.1.
Solution
By default, self-originating traffic, such as Syslog, FortiAnalyzer logging, FortiGuard services, remote authentication, and others, relies on routing table lookups to determine the egress interface that is used to initiate the connection.
Policy routes generated by SD-WAN rules do not apply to this traffic.
To traceroute traffic that passes through the SD-WAN rule we can use the commands below:
nitrogen-kvm06 # execute traceroute-options
device <----- Auto | <ifname>.
queries <----- Integer value to specify number of queries per hop.
source <----- Auto | <source interface IP>.
use-sdwan <----- Use SD-WAN rules to get output interface <yes | no>.
view-settings <----- View the current options of traceroute.
Related Articles
Troubleshooting Tip: Using traceroute options from FortiGate CLI