FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
pciurea
Staff
Staff
Article Id 195583

Description
This article shows how to configure the gateway for DHCP and PPPOE SDWAN members.

Solution

Configuration example:

 

config system interface

 

    edit "wan1"

 

        set vdom "root"

 

        set mode dhcp

 

        set allowaccess ping fgfm

 

        set type physical

 

        set role wan

 

        set snmp-index 1

 

    next

 

end

 


If an interface is configured to use DHCP or PPOE and added to an SD-WAN interface, select “Dynamic” for Gateway, as the gateway is learned dynamically through the dhcp process.

 

The SD-WAN member configuration should be

 

Through CLI

 

config system virtual-wan-link

 

    config members

 

        edit 1

 

            set interface "wan1"

 

        next

 

    end

 

 

 

!!! Extra caution should be taken if the DHCP interface is added first and is the only underlay interface, as adding the DHCP interface as a SDWAN member will erase the dynamically added default route added through the DHCP process – to overcome this, before adding the DHCP interface as a SDWAN member, you need to  add a default static route pointing to the DHCP interface:

 

 

CLI:

 

config router static

 

    edit 1

 

        set device "wan1"

 

        set dynamic-gateway enable

 

    next

 

end

 

 

After adding the DHCP interface to SDWAN, you can modify the created default static route to use the SDWAN interface - SDWAN interface cannot be used in routing before adding a member

 

 



Contributors