- Access the CLI of the FortiGate.
- Enter the following command to move a specific SD-WAN member.
FGT # config system sdwan
FGT (sdwan) # config members
FGT (members) # show
config members
edit 1
set interface "port1"
set zone "SDWAN-INET"
set gateway 1.1.1.1
next
edit 2
set interface "port2"
set zone "SDWAN-INET"
set gateway 2.2.2.2
next
edit 3
set interface "s2sadvpn1_LL"
set zone "SDWAN-ADVPN"
next
...
...
...
edit 12
set interface "port3"
set zone "SDWAN-INET"
set gateway 3.3.3.3
next
end
FGT (members) # move 12 before 3
FGT (members) # show
config members
edit 1
set interface "port1"
set zone "SDWAN-INET"
set gateway 1.1.1.1
next
edit 2
set interface "port2"
set zone "SDWAN-INET"
set gateway 2.2.2.2
next
edit 12
set interface "port3"
set zone "SDWAN-INET"
set gateway 3.3.3.3
next
edit 3
set interface "s2sadvpn1_LL"
set zone "SDWAN-ADVPN"
...
...
...
FGT (members) # end
FGT (sdwan) # end
Other possibilities for moving a command using a '?' after the command are shown below:
FGT(members) # move
seq-num Sequence number(1-512).
1 port1 SDWAN-INET
2 port2 SDWAN-INET
3 s2sadvpn1_LL SDWAN-ADVPN
..
..
12 port3 SDWAN-INET
FGT (sdwan) # config members
FGT (members) # move 12
after move after
before move before
To move an SD-WAN service, refer to the below KB article:
Technical Tip: How to change sequence of SD-WAN rules using CLI
FortiGate command 'print tablesize':
Technical Tip: FortiGate maximum values table and search for the entry 'system.sdwan:members'.
|
