FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
Adryan_you
Staff
Staff
Article Id 241359

 

Description This article describes how to use an automation stitch to shut down the WAN interface if SLA fails.
Scope FortiGate.
Solution

In this setup, port1 is the WAN interface. 

  1. Create an Automation Action that will shut port1.
                                                             

Adryan_you_1-1672280589961.png

 

Adryan_you_3-1672280686172.png

 

  1. Create the Automation trigger when the SLA fails, the port1 is brought down.
                                                                  

Adryan_you_5-1672280876760.png

 

Adryan_you_6-1672280958513.png

 

  1. Create Automation Stitch. When port1 SLA fails, port1 will be brought down.
                                                              

Adryan_you_8-1672281144132.png

 

Adryan_you_9-1672281257376.png

 

  1. Test Result.
  • Port1 SLA failed. Port1 shuts down automatically.

 

Adryan_you_11-1672283291076.png

 

date=2022-12-29 time=10:51:33 eventtime=1672282293501050307 tz="+0800" logid="0113022933" type="event" subtype="sdwan" level="notice" vd="root" logdesc="SDWAN SLA notification" eventtype="Health Check" healthcheck="SLA8888FGT1" interface="port1" probeproto="ping" newvalue="dead" msg="SD-WAN health-check member initial state."

 

date=2022-12-29 time=10:51:34 eventtime=1672282294142945722 tz="+0800" logid="0100020099" type="event" subtype="system" level="warning" vd="root" logdesc="Interface status changed" action="interface-stat-change" status="DOWN" msg="Link monitor: Interface port1 was turned down"