FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
hjezzapaula
Staff
Staff
Article Id 365119
Description This article describes the behavior of enabling the 'Update static route' when configured on performance SLAs with 2 servers.
Scope FortiGate.
Solution

Use the below example with two servers configured  under 'Google DNS':

 

IPSLA.PNG

 

If the first server (8.8.8.8) is unreachable to all the SD-WAN members, the SLA will start to probe the statistics of the second server.

This will not make any routing changes as long as one of the configured servers is still alive and reachable to the SD-WAN member/s.

 

Command to verify the routes:

 

get router info routing-table details 8.8.8.8

or 

get router info routing-table all

 

rt.PNG

 

The 'update static route' will only remove the static routes for an SD-WAN member/s that has failed to reach both servers or failed to meet the configured metrics.

 

For example: If server 1 is unreachable to all the SD-WAN members, it will then use server 2 statistics. If server 2 is only reachable using WAN1, then the static route using WAN2 will be removed.

Command to verify the routes:

 

get router info routing-table details 8.8.8.8

or 

get router info routing-table all

 

rt2.PNG

 

Related article:

Technical Tip: Bring other interfaces down when link monitor fails