WAN1 is alerting Up,Down- Up,Down

Forum|Forum|4 years ago
June 23, 2022
2 replies
4140 views

Hi, I'm using 100EF FortiGate. from past few day its alerting on my email WAN1 Down and after few seconds it alerts WAN1 Up.

I'm running two ISPs. I haven't updated its firmware yet. WAN1 connection is via Fiber media converter then a Router and it further in the FortiGate. here is the error. Do let me know how to avoid this hitch.

"type="event" subtype="system" level="critical" vd="root" logdesc="Routing information changed" name="google" interface="wan1" status="down" msg="Static route on interface wan1 may be removed by health-check google. Route: (192.168.30.119->8.8.4.4 ping-down) (192.168.30.119->8.8.8.8 ping-down)"

FortiGate

Vichu_94

Staff

Hi Aezaz,

I would like to know if you have configured a SD-WAN on the firewall

From the logs, I suspect that the SD-WAN performance SLA is causing the wan 1 link to failover to wan 2 link. Thus causing the alerts to trigger

https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/856781/understanding-sd-wan-related-logs

sjoshi

Staff

Hi Aezazdurrani56,

Thank you for posting to the Fortinet Community Forum.

From your description I can understand that you are getting multiple alert email stating that your wan1 is down

As per the logs the alert mail is regarding the performance sla which you must have configured in SDWAN.
It is not stating the information regarding the interface is being down but the link from wan1 is down due to which it is removing the default route from wan1 from the routing table
From the logs I could see that you have configured source IP

Can you check by removing the source IP
config system sdwan
config members
edit 1
unset source

Also consult with your ISP why the link is being down and 8.8.8.8 is unreachable.

Let us know if this helps.

Thanks

Thanks, Salon

Sign up

Login with SSO

Login to the community

Login with SSO