Skip to main content
jokes54321
New Member
October 7, 2022
Question

SDWan, making sense of Update Static Route slider

  • October 7, 2022
  • 3 replies
  • 3294 views

My team has been deploying a lot of SDWan lately with DIA and Broadband circuits. We have a couple of sites that have frequently been reporting session disconnects from cloud hosted applications and SIP phones that suddenly lose audio.

 

I asked the sites to start reporting the exact times so I could correlate their issues to events in the logs. So far, each reported event seems to correlate to SDWan changes. Digging in deeper, neither of the circuits seem to be dropping, just falling outside the defined SLA values.

 

Each time it was reported, I checked the active sessions on the firewall for the impacted phones and saw the destination interface being used didn't match the interface SDWan was preferring at the time.  This leads me to believe the SDWan decisions are impacting existing connections.  

 

If I have the "Update Static Route" slider enabled, and a circuit doesn't meet the defined SLA requirement, will it break existing connections by removing the route, but keep the sessions active in state?

 

 

When would a person want to enable this slider and when would they want to keep is disabled?

 

Denny   

3 replies

akristof
Staff
Staff
October 13, 2022

Hello,

 

Option update-static-route will remove route from routing-table only if the health-check for that interface is dead. If it is out-of-sla, it will be still in the routing-table.

If you have SLA targets enabled for health-check, if the metric will be not within, then the interface might not be used in sdwan rule and other interface will be preferred.

trandungptit
New Member
February 26, 2026

in this case, when an interface is out of SLA but its health check is still alive, existing sessions will continue to use the original interface, while newly established sessions will be forwarded through a different SD-WAN member. Is this correct?

gfleming
Staff
Staff
October 13, 2022

How are your SIP phones connecting across your WAN? Do you have IPSec tunnel? Or is it going to Internet somewhere? If it's using internet you are likely doing NAT. When SD-WAN SLA causes a new interface to be used you will be establishing a new session with new SNAT and that will break SIP communications as it has to reconnect. 

 

If you have IPSec tunnel overlay you can switch between WAN links seamlessly...

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!