FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
tgirard
Staff
Staff
Article Id 340357
Description This article describes the configuration needed to have traffic load-balanced over multiple shortcuts for ADVPN SD-WAN 2.0 
Scope Available from FortiOS 7.6.0
Solution

The load-balancing of traffic over several shortcuts will be effective when the following configuration is applied:

 

config system sdwan

config service

  edit 1

        set load-balance enable

        set mode sla

        …

        set tie-break fib-best-match

    next

end

 

With the above configuration, the source spoke will establish and use a full mesh of shortcuts between all local members and all members of the remote spoke within the same transport-group. The transport-group is configured at the SD-WAN member level.

 

The algorithm used for load balancing is defined (once load-balance is enabled for this service) by:

 

config system sdwan

config service

edit 1

set hash-mode

 

For details of the different hash-modes available, see 'load balance hash methods' section of the documentation.

 

Configuring load-balance with a manual service (config service, set mode manual) will result in only one shortcut being created in release 7.6.0.

Contributors