SDWAN BGP not failing over

Hi noxka,

Could you please share the ticket number? I will try to reproduce the issue in my lab. I believe all the necessary information is already included in the ticket. Thanks

Bill

Can you show me your Routing table when the issue comes up?

I wonder if you should not add any route to the SDWAN interface.

But add those BGP interfaces to an SDWAN zone only.

Also, don't make any SDWAN rules, but use "Metric/MED" to control the traffic

I really think it's about your strategy/design how to utilize BGP in addition to SD-WAN, or vice versa in your network.
BGP does provide path selection based on the destination addresses/subnets (so-called routes). But can't do this with either source addresses/subnets or applications/traffic types, which can be done by SD-WAN.
So general strategy of using BGP with SD-WAN is
1) get all possible routes via BGP as muti-path instead of having static routes enumerating those manually.
2) use SD-WAN to set fail-over, load-balance, or whatever the rules are to select one of possible paths you would like to set.
Based on this, the admin guide like below is using iBGP to all neighbors (meshed) with multi-path option.
https://docs.fortinet.com/document/fortigate/7.4.8/administration-guide/773406/bgp-multiple-path-support

However, if you just want the paths to certain destinations to fail-over to the other path when a tunnel goes down by using BGP's metric's, such as community+local-preference, MED, ASPath length, you don't need SD-WAN. Just use BGP for those interfaces.

Toshi