Skip to main content
ssanga
Staff & Editor
Staff & Editor
November 4, 2024

Technical Tip: SD-WAN Logs Display Parent Tunnel Interface Instead of Shortcut Tunnel Interface

Description This article describes a known issue where SD-WAN logs display the parent tunnel interface instead of the shortcut tunnel interface in specific health-check events.
Scope FortiGate v7.2.8
Solution

When the health check of a shortcut tunnel interface fails, the following logs are observed in the SD-WAN Events:

 

itime=1727691041 date="2024-09-30" devid="FGT60FTK*****" vd="root" type="event" subtype="sdwan" bibandwidthavailable="2.00Gbps" bibandwidthused="0kbps" bid=21721635 devname="FW1" dstepid=3 dsteuid=3 dvid=1614 epid=104 euid=3 eventtime=1727691055771806489 eventtype="SLA" healthcheck="Corporate_SLA" id=7420376518703974948 inbandwidthavailable="1000.00Mbps" time="11:10:56" inbandwidthused="0kbps" interface="iNet_B_H_0" msg="Health Check SLA status. SLA failed due to being over the performance metric threshold." status="down" jitter="0.000" latency="0.000" level="notice" logdesc="SDWAN SLA notification" logid="0113022933" logver=702084898 metric="packetloss" moscodec="unsupported codec!" mosvalue="0.000" outbandwidthavailable="1000.00Mbps" outbandwidthused="0kbps" packetloss="11.000" slamap="0x0" slatargetid=1 tz="+0100"

itime=1727691041 date="2024-09-30" devid="FGT60FTK*****" vd="root" type="event" subtype="sdwan" bid=21721635 devname="FW1" dstepid=3 dsteuid=3 dvid=1614 epid=3 euid=3 eventtime=1727691055770936709 eventtype="Health Check" healthcheck="Corporate_SLA" id=7420376518703974947 time="11:10:56" interface="iNet_B_H_0" msg="SD-WAN health-check member changed state." newvalue="dead" oldvalue="alive" level="warning" logdesc="SDWAN SLA information warning" logid="0113022931" logver=702084898 probeproto="ping" tz="+0100"


However, the logs that follow show the parent tunnel interface, 'iNet_B_H', instead of the shortcut tunnel interface 'iNet_B_H_0':

itime=1727691041 date="2024-09-30" devid="FGT60FTK*****" vd="root" type="event" subtype="sdwan" bid=21721635 devname="FW1" dstepid=3 dsteuid=3 dvid=1614 epid=3 euid=3 eventtime=1727691056071762769 eventtype="Service" gateway="192.168.1.2" id=7420376518703975120 time="11:10:56" interface="iNet_B_H" msg="Member link is unreachable or miss threshold. Stop forwarding traffic. " service="Spoke_Guest" level="notice" logdesc="SDWAN status" logid="0113022923" logver=702084898 member="1" metric="latency" serviceid=12 tz="+0100"

itime=1727691041 date="2024-09-30" devid="FGT60FTK*****" vd="root" type="event" subtype="sdwan" bid=21721635 devname="FW1" dstepid=3 dsteuid=3 dvid=1614 epid=3 euid=3 eventtime=1727691056071607529 eventtype="Service" gateway="192.168.1.2" id=7420376518703975118 time="11:10:56" interface="iNet_B_H" msg="Member link is unreachable or miss threshold. Stop forwarding traffic. " service="Spoke_LAN" level="notice" logdesc="SDWAN status" logid="0113022923" logver=702084898 member="1" metric="latency" serviceid=9 tz="+0100"

itime=1727691041 date="2024-09-30" devid="FGT60FTK*****" vd="root" type="event" subtype="sdwan" bid=21721635 devname="FW1" dstepid=3 dsteuid=3 dvid=1614 epid=3 euid=3 eventtime=1727691056071440089 eventtype="Service" gateway="192.168.1.2" id=7420376518703975116 time="11:10:56" interface="iNet_B_H" msg="Member link is unreachable or miss threshold. Stop forwarding traffic. " service="Spoke_VOIP_" level="notice" logdesc="SDWAN status" logid="0113022923" logver=702084898 member="1" metric="latency" serviceid=7 tz="+0100"

itime=1727691041 date="2024-09-30" devid="FGT60FTK*****" vd="root" type="event" subtype="sdwan" bid=21721635 devname="FW1" dstepid=3 dsteuid=3 dvid=1614 epid=104 euid=3 eventtime=1727691056071279969 eventtype="Service" gateway="192.168.1.2" id=7420376518703975114 time="11:10:56" interface="iNet_B_H" msg="Member link is unreachable or miss threshold. Stop forwarding traffic. " service="Spoke_LAN" level="notice" logdesc="SDWAN status" logid="0113022923" logver=702084898 member="1" metric="latency" serviceid=5 tz="+0100"

itime=1727691041 date="2024-09-30" devid="FGT60FTK*****" vd="root" type="event" subtype="sdwan" bid=21721635 devname="FW1" dstepid=3 dsteuid=3 dvid=1614 epid=3 euid=3 eventtime=1727691056071116589 eventtype="Service" gateway="192.168.1.2" id=7420376518703975112 time="11:10:56" interface="iNet_B_H" msg="Member link is unreachable or miss threshold. Stop forwarding traffic. " service="Spoke_LAN_To1" level="notice" logdesc="SDWAN status" logid="0113022923" logver=702084898 member="1" metric="latency" serviceid=3 tz="+0100"

itime=1727691041 date="2024-09-30" devid="FGT60FTK*****" vd="root" type="event" subtype="sdwan" bid=21721635 devname="FW1" dstepid=3 dsteuid=3 dvid=1614 epid=3 euid=3 eventtime=1727691056070911949 eventtype="Service" gateway="192.168.1.2" id=7420376518703975110 time="11:10:56" interface="iNet_B_H" msg="Member link is unreachable or miss threshold. Stop forwarding traffic. " service="RC_MGMNT_R1" level="notice" logdesc="SDWAN status" logid="0113022923" logver=702084898 member="1" metric="latency" serviceid=1 tz="+0100"

 

This issue has been resolved in v7.6.1.

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT