Description | This article describes how to change the SD-WAN Service rule order using CLI. |
Scope | FortiOS. |
Solution |
Dragging the policy to modify its order in the SD-WAN rule via GUI is achievable via CLI, as seen below.
Original SD-WAN service rule order:
# di firewall proute list id=2130903042(0x7f030002) vwl_service=2(TEST2) vwl_mbr_seq=2 dscp_tag=0xfc 0xfc flags=0x0 tos=0x00 tos_mask=0x00 protocol=0 sport=0-65535 iif=0(any) dport=1-65535 path(1) oif=7(port5)
id=2130903041(0x7f030001) vwl_service=1(TEST) vwl_mbr_seq=1 dscp_tag=0xfc 0xfc flags=0x0 tos=0x00 tos_mask=0x00 protocol=0 sport=0-65535 iif=0(any) dport=1-65535 path(1) oif=6(port4)
Change the order of the SD-WAN service rule via CLI:
# config system sdwan # config service (SD-WAN) move 2 before 1 (service) end (service) end (SD-WAN)
# move <id> <after/before> <id> *id SD-WAN rule ID (1 - 4000). after move after
After changing the SD-WAN service rule order:
# di firewall proute list id=2130968578(0x7f040002) vwl_service=2(TEST2) vwl_mbr_seq=2 dscp_tag=0xfc 0xfc flags=0x0 tos=0x00 tos_mask=0x00 protocol=0 sport=0-65535 iif=0(any) dport=1-65535 path(1) oif=7(port5)
id=2130968577(0x7f040001) vwl_service=1(TEST) vwl_mbr_seq=1 dscp_tag=0xfc 0xfc flags=0x0 tos=0x00 tos_mask=0x00 protocol=0 sport=0-65535 iif=0(any) dport=1-65535 path(1) oif=6(port4)
This is analogous to dragging a policy into a new position in the SD-WAN rule/service table. |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.