Skip to main content
SK2505
Explorer
May 14, 2024
Question

SD-WAN Rule Best quality with Packet loss not working

  • May 14, 2024
  • 2 replies
  • 1369 views

Team,

 

Could you please assist on the below query.

 

The fortigate is running firmware with 6.4.x. configured the two redundant link in the SDWAN and performance SLA also configured with packet loss as the failover criteria.

 

The same SDWAN rule also configured with Best Quality and Packet loss as SLA. Some time the link having high packet loss causing link failover that is normal behavior what we want.

 

Most of the time high latency also causing link failover, that is unwanted behavior. We don't want to failover the link when the link having high latency.   The link should be failover when packet loss is high.

 

Can you please help on this.

 

I have searched in the KB article. Could not find the correct article.

2 replies

pminarik
Staff
Staff
May 14, 2024

What's the latency when it's "high" during your issues?

There is a default 500ms timeout for Link Status probes, so perhaps that could be what's triggering failovers for you? If it's higher, this could be the source of the issue.

The timeout can be tweaked in the CLI:

 

config system sdwan

config health-check

edit <SLA name>

set probe-timeout <500~3600 000; in milliseconds>

next

end

end

hbac
Staff
Staff
May 14, 2024

Hi @SK2505,

 

Can you share the performance SLA configuration? Do you have "Latency threshold" enabled for SLA Target? 

 

Regards, 

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.