Skip to main content
sean3
Explorer II
March 2, 2024
Question

does a different priority assigned to a static routes for same prefix make sense in SD-WAN?

  • March 2, 2024
  • 5 replies
  • 2955 views

hi all,

thanks for your any help in advance?

think of the scenario:

initially we have a sd-wan rule for traffic destined to 10.74.0.0/15 with an MPLS underlay interface as the SD-WAN member interface, and sure we have a static route 10.74.0.0/15 and the MPLS interface is the egress interface, priority stays the default 1.

afterwards we think of the security and we have existing ipsec overlay tunnel based on Internet (yes the phase 2 selector something are all configured well for the traffic, it's verified working), so we created another static routes to 10.74.0.0/15 and pointing to that ip sec overlay interface, the tunnel interface is one of the sd-wan member interface of course.

the question is, in this scenario, assigning a different (in this case, priority 20) to the second static routes via ipsec tunnel interface make any sense? I think sd-wan rule (lowest SLA as outgoing interface selection rule) will automatically steer the member selection, which results in the selection of the  egress interface, it has nothing to do with the priority difference on the two static routes. So, in my opinion we do not need to assign a different priority for the second static routes that is pointing to ipsec tunnel interface.

 

what is your opinion? Thanks for any advice.

5 replies

AEK
SuperUser
SuperUser
March 2, 2024

Hi Sean

May be I missed something but I've never created a route for a SD-WAN member. Once some interfaces are members of SD-WAN interface all related routes I create are pointing to SD-WAN interface, not on members. The SD-WAN rules will do the rest.

AEK
Hong_FTNT
Staff & Editor
Staff & Editor
March 2, 2024

Hi @sean3,

 

When using lowest SLA as outgoing interface selection rule, the interface that meets SLA targets is selected. When there is a tie, the interface with the lowest assigned cost is selected.

 

Regards, 

sean3
sean3Author
Explorer II
March 3, 2024

tanks,. I am talking about the priority assigned to the static route. two member interface in an SDWAN rule, should the static routes to thoses two interface have different priority?

Hong_FTNT
Staff & Editor
Staff & Editor
March 4, 2024

@sean3,

 

I'm not sure why you care about priority. If both interfaces are in the same SDWAN zone, there should be one static route and traffic will be handled by SDWAN rule. 

 

Regards, 

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!