Add WAN Redundant Interface to SD-Wan

[ITSupportDievole]

FortiGate FGT60 connected to:

- ISP1 with dual failover active/standby router (VeloCloud) - single Static IP/Gw - 2 Eth port 

- ISP2 with PPPoE connection

- ISP3 with PPPoE connection

I've started to configure SD-Wan to manage fails and load balancing,

but cannot add the redundant interface to the zone: it does not appear in GUI

Need to be managed/added via CLI ?

---------------------------------------------------------------------------

Actually configuration:

ISP1:

config system interface
edit "ISP1"
set vdom "root"
set ip xx.xx.xx.xx 255.255.255.248
set allowaccess ping https http fgfm fabric speed-test
set type redundant
set member "wan2" "wan1"
set lldp-reception enable
set lldp-transmission enable
set estimated-upstream-bandwidth 10000
set estimated-downstream-bandwidth 10000
set monitor-bandwidth enable
set role wan
set snmp-index 18
next
end

ISP2:

config system interface
edit "dmz"
set vdom "root"
set mode pppoe
set distance 20
set allowaccess ping https http
set vlanforward enable
set type physical
set alias "ISP2"
set lldp-reception enable
set estimated-upstream-bandwidth 5000
set estimated-downstream-bandwidth 5000
set monitor-bandwidth enable
set role wan
set snmp-index 3
set username "xxxxxxx"
set password ENC xxxxxxxxxxx
next
end

ISP3:

config system interface
edit "internal7"
set vdom "root"
set mode pppoe
set distance 30
set type physical
set alias "ISP3"
set lldp-reception enable
set estimated-upstream-bandwidth 1000
set estimated-downstream-bandwidth 1000
set role wan
set snmp-index 15
set username "xxxxxxxx"
set password ENC xxxxxxxxxxxxxxxxx
next
end

SD-WAN Config:

config system sdwan
set status enable
config zone
edit "SDWan-Zone"
next
end
config members
edit 1
set interface "dmz"
set zone "SDWan-Zone"
next
edit 2
set interface "internal7"
set zone "SDWan-Zone"
next
end
config health-check
edit "SLA_Ping"
set server "8.8.8.8" "1.1.1.1"
set members 0
next
end
end

[gfleming]

You need to add those interfaces to SD-WAN members and then you can add them to zone.

https://docs.fortinet.com/document/fortigate/7.2.3/administration-guide/942095/sd-wan-members-and-zo...