FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
btey
Staff
Staff
Article Id 349431
Description This article describes the method to show route tag address.
Scope FortiGate v7.4.0.
Solution

In v7.4.0, the SD-WAN service or proute list will not show the learned tag address:

 

sample # diagnose sys sdwan service4

Service(1): Address Mode(IPV4) flags=0x4200 use-shortcut-sla use-shortcut
Tie break: cfg
Shortcut priority: 2
Gen(2), TOS(0x0/0x0), Protocol(0): src(1->65535):dst(1->65535), Mode(manual)
Members(1):
1: Seq_num(2 vpn-aws virtual-wan-link), alive, selected
Route tag address(1): Route-tag(21464)

 

sample # diagnose firewall proute list
list route policy info(vf=root):

id=2130706433(0x7f000001) vwl_service=1(abbbbbb) vwl_mbr_seq=2 dscp_tag=0xfc 0xfc flags=0x40 order-addr tos=0x00 tos_mask=0x00 protocol=0 port=src(0->0):dst(0->0) iif=0(any)
path(1): oif=23(vpn-aws)
source wildcard(1): 0.0.0.0/0.0.0.0
Destination Address(route_tag): 21464
hit_count=628 rule_last_used=2024-10-14 01:18:24

 

To check the details of the route tag learned:

 

sample # diagnose sys route_tag list
Route-tag: 21464, vrf_id: 0, address: v4(1), v6(0)Last write/now: 6769851 6792012
Prefix(24): Address list(1):
192.168.1.0-192.168.1.255 oif: 23

 

sample # diagnose firewall route_tag list 21464 (diagnose firewall route_tag list <tag number>)
list route tag info(vf(root)), route_tag(21464):
route tag address, route_tag(21464) vrf_num(1):
vrf id(0), num(1): 192.168.1.0-192.168.1.255

 

Contributors