Skip to main content
slouw
slouw
Explorer III
November 18, 2023
Question

How is SD-WAN enabled - Part 2

  • November 18, 2023
  • 3 replies
  • 1717 views

I know from this post:

How is SD-WAN enabled? 

That there is no explicit command or checkbox to turn on SD-WAN.

Rather SD-WAN action/behaviour is enacted when the various components e.g. SD-WAN zones, rules etc are configured.

Is it true to say then that unless an SD-WAN rule is configured (in addition to the implicit rule that is always present) there is no SD-WAN action or activity? Without at least one properly configured SD-WAN rule all traffic is directed by the routing table (assuming no policy routing is configured)?

Thanks.....

3 replies

AEK
SuperUser
AEK
SuperUser
November 18, 2023

No need to add extra SD-WAN rule to activate SD-WAN, implicit rule will do the job.

Don't forget to add:

  • Default gateway via SD-WAN
  • Firewall policy for internet traffic via SD-WAN interface
AEK
    slouw
    slouwAuthor
    Explorer III
    November 18, 2023

    @AEK thanks for reply

    "No need to add extra SD-WAN rule to activate SD-WAN, implicit rule will do the job."

    So SD-WAN can in fact be active, overriding the routing table with only the implicit rule in place?

    esalija
    Staff
    esalija
    Staff
    November 18, 2023

    Hi @slouw 

     

    SD-WAN rules define specific policy routing options to route traffic to an SD-WAN member. When no explicit SD-WAN rules are defined, or if none of the rules are matched, then the default implicit rule is used.

     

    Please follow the doc for more details - https://docs.fortinet.com/document/fortigate/7.4.1/administration-guide/216765/implicit-rule

     

    Best regards,

    Erlin

    slouw
    slouwAuthor
    Explorer III
    November 18, 2023

    Thanks @esalija 

    "When no explicit SD-WAN rules are defined, or if none of the rules are matched, then the default implicit rule is used."

    On a production site I am examining I have only the implicit rule as shown.

    I was assuming that this rule does nothing and that all forwarding decisions are a function of the routing table.

    What in fact does the implicit rule do exactly?

    Thanks again

    2023-11-19 08h25m04 Gympie SD-WAN Implicit rule only.jpg

    hbac
    Staff
    hbac
    Staff
    November 18, 2023

    Hi @slouw,

     

    Consider SD-WAN to be enabled to work properly when: 

     

    1. You added one or more wan interfaces to an SDWAN zone. 

    2. Your default route is pointing to an SDWAN zone. 

    3. Your outbound policies are pointing to an SDWAN zone as outgoing interface and vice versa. 

     

    SDWAN rules and performance SLA are optional. 

     

    Regards, 

      Terms & ConditionsAccessibility statement