FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
This article describes, how the TACACS traffic initiated by the Fortigate could prefer the sdwan rules to egress the traffic instead of the static routes.
Scope
FortiGate,
Solution
Tacacs+ authentication is self-originating traffic and by default, it relies on routing table lookups to determine the egress interface that is used to initiate the connection.
For Tacacs configuration, there are three interface selection methods:
auto: Set outgoing interface automatically.
sdwan: Set outgoing interface by SD-WAN or policy routing rules.
specify: Set the outgoing interface manually.
Note:
The default interface selection method is set to auto.
Prefer SD-WAN rules for Tacacs by using the following commands on the CLI:
config user tacacs+ edit <server name> set interface-select-method sdwan next end
