Skip to main content
RolandBaumgaertner72
RolandBaumgaertner72
New Member
March 18, 2024
Question

Policy Routes with SD WAN - Suggestions

  • March 18, 2024
  • 2 replies
  • 1427 views

Hello,

 

we are changing a FG Cluster to FG200F.

 

In the old config we have 2 x WAN Access and we devided the accesses with Poliy Routes +  Policies.

 

Now we want to use SD WAN as Backup Failover and devide in a smarter way the traffic. So now I am not sure if we change our Policy Routing to SD WAN Rules? But some of the Policy Routing is also depending on LAN, DMZ and VPN, so I guess I will still need Policy Routes and for all outgoing traffic to SD WAN SD WAN Rules, no?

 

What is the best practice to have like Failover + 90-10% Balancing, the Implicit Rule?


Thanks! 

 

 

 

 

 

2 replies

spoojary
Staff
spoojary
Staff
March 18, 2024

In SD-WAN it has his own rule on which interface to be used, if you have any.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-SD-WAN-failover-between-two-three-WAN-interfaces/ta-p/274797

    syordanov
    Staff
    syordanov
    Staff
    March 18, 2024

    Hello RolandBaumgaerhner72,

     

    If you want to combine Policy routes + SD-WAN , keep in mind that Fortigate fist process the policy routes and if there is no match then checks the SD-WAN . The KB bellow provides a useful information for the behaviour of Fortigate when policy routes +SD-WAN are configured :

     

    https://community.fortinet.com/t5/FortiGate/Technical-Tip-FortiGate-Routing/ta-p/207197

     

    Also keep in mind that if you want to configure a SD-WAN on your existing configuration , every new SD-WAN member should be not used anywhere in your configuration(no references ).

     

    Best regards,

    Fortinet

      Terms & ConditionsAccessibility statement