Description | This article describes the behavior of the SD-WANrules configured in manual mode when the performance sla for the interface is failing. |
Scope | FortiOs . |
Solution |
If all health-check are indicating that an interface is dead, even if it is used in the manual mode, this SD-WAN rule will be void.
# config system sdwan
When the SLA is failing the interface is marked as dead.
FortiGate-1000D # di sys sdwan health-check
The rule is disabled:
FortiGate-1000D # diagnose sys sdwan service Service(1): Address Mode(IPV4) flags=0x200
To avoid this behavior in case the configured SLA is used in different rule and to have the manual rule to be matched, it is possible to configure a SLA which will monitor different server and will still be up.
This behaviour can cause issues when there are multiple rules and in some of them SLA is configured. But it is also necessary to have rules in manual mode which needs to be always matched.Example: in order to tag the traffic. |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.