SD-WAN on 5.6.4: very unbalanced traffic

Question

Hello Forum, We're having a problem at a customer's site. They have 3 wan links in a volume-based SD-WAN interface on a FortiGate 101E (5.6.4). Their weights are: wan1: 50 wan2: 50 port1 (aka wan3): 0 We're not using the third wan link yet. I've configured a status check that pings 8.8.8.8 with default values. What are the objectives?

[ul]

traffic with a destination to the interbanking block goes through wan2.

traffic from the proxy server will be balanced among wan1 and wan2.

traffic from other sources will go through wan2.[/ul]

What's happening? Tough the proxy server generates almost all the traffic, almost everything seems to go only through wan2 (wan1: 1.9gb, wan2: 299.6 gb). I have a suspect, since 5.6.4 there's a "Quality criteria" option, whose possible values are: Latency, Jitter and Packet Loss (I haven't found much documentation about this). I know that wan2 is better than wan2, but I want traffic to be distributed evenly anyway. Any hints? Thanks in advance.

Agent_1994 · Answer

I forgot to add this, FWIW:

config system virtual-wan-link set status enable set load-balance-mode measured-volume-based config members edit 1 set interface "wan1" set gateway x.x.x.1 set volume-ratio 50 next edit 2 set interface "wan2" set gateway y.y.y.33 set volume-ratio 50 next edit 3 set interface "port1" set gateway z.z.z.1 next end config health-check edit "google" set server "8.8.8.8" next end config service edit 1 set name "interbanking via wan2" set member 2 set dst "interbanking" set src "all" next edit 2 set name "proxy" set mode auto set quality-link 1 set dst "all" set src "proxy" set health-check "google" next edit 3 set name "default" set member 2 set dst "all" set src "all" next end end

Sign up

Login with SSO

Login to the community

Login with SSO

Scanning file for viruses.

This file cannot be downloaded