Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
JGaiser
New Contributor II

Convert IPSEC interfaces to SDWAN

We are adding secondary internet connections to a number of our sites, and will need IPSec tunnels to utilize both connections in a mostly active-passive scenario.

It looks like the best way to do this is with SDWAN, but to add existing IPSEC interfaces to an SDWAN zone, it looks like all references need to be removed.

Is there a process in which these tunnels can be "converted" to be used in SDWAN zones without having to remove all of the refences in all the rules?

2 REPLIES 2
funkylicious
SuperUser
SuperUser

If you are running FortiOS 7.0.x+, use https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-add-the-interface-in-SD-WAN-member-...

"jack of all trades, master of none"
"jack of all trades, master of none"
AEK
SuperUser
SuperUser

In addition to Funkylicious post, I do remember I used "Interface Integration" wizard to do so and the WAN interface ref was not removed from IPsec configurations.

AEK
AEK
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors