Troubleshooting Tip: Unable to add an interface to SD-WAN Zone as a member, some interfaces do not show in the drop-down list

[Umer221]

Description	This article provides guidance on how to configure an interface as an SD-WAN member if it does not appear in the Interface field.
Scope	FortiOS, FortiGate, SD-WAN.
Solution	An interface cannot be configured as an SD-WAN member in any of the following cases: Interface is already used in an existing firewall policy or system zone. Interface is already used as a member of a switch or aggregate interface. Interface is configured as an out-of-band management interface. An interface that is not eligible to be configured in SD-WAN will not be visible in the New SD-WAN Member page: Network -> SD-WAN -> Select ‘Create New’ -> Select 'SD-WAN Member'. To make an interface eligible for SD-WAN: If the interface is already in use, the following changes will cause traffic disruption until SD-WAN is configured. It is recommended to take a configuration backup before proceeding. Find the interface’s references: In Network -> Interfaces, select the number in the 'Ref.' column to bring up the References pane. Check the References Pane for configuration that prevents the device from becoming an SD-WAN member. If an interface does not have its row in Network -> Interface, it may be a member of another interface. Locate it using the interface search function. Removing conflicting references: Remove interface from switch or aggregate 'Interface members'. Remove the interface from firewall policies. Remove the interface from the System Zone. Remove out-of-band management configuration: Some FortiGate models include ports that can be configured for dedicated out-of-band management. If a physical port has no references showing in Network > Interfaces but still cannot be configured as an SD-WAN member, disable any Dedicated Management Port configuration. High Availability clusters also include the out-of-band management option 'Reserved Management Interface'. Reserved management interfaces cannot be configured as an SD-WAN member. Result: After removing all conflicting references, the interface shows as available in the SD-WAN member Interface drop-down. Note: For simple configurations, the Interface Migration Wizard can update conflicting references automatically. See 'Technical Tip: How to add the interface in SD-WAN member without deleting references'. Do not add an SD-WAN member when its gateway is in the firewall's IP pool list, as this could cause issues when installing a route to Kernel and cause an outage. This SD-WAN configuration limitation will be added in the upcoming firmware v8.0.