Technical Tip: How to trace-route using the SD-WAN interface

[Anthony_E]

Description

This article describes how to trace-route using the SD-WAN interface.

Scope

FortiGate v7.0.1.

Solution

By default, self-originating traffic, such as Syslog, FortiAnalyzer logging, FortiGuard services, remote authentication, and others, relies on routing table lookups to determine the egress interface that is used to initiate the connection.

Policy routes generated by SD-WAN rules do not apply to this traffic.

To traceroute traffic that passes through the SD-WAN rule we can use the commands below:

nitrogen-kvm06 # execute traceroute-options 

device           <----- Auto | <ifname>.

queries          <----- Integer value to specify number of queries per hop.

source           <----- Auto | <source interface IP>.

use-sdwan        <----- Use SD-WAN rules to get output interface <yes | no>.

view-settings    <----- View the current options of traceroute.

Related Articles

Troubleshooting Tip: Using traceroute options from FortiGate CLI