Fortigate 60F monitoring WAN interfaces

[CustomX]

Hi,

We have 2 WAN interfaces, but experience occasional disconnects on the network. We want to rule out WAN issues and monitor them, but can't see any option to do so.

We have a Fortigate 60F running 7.4.0 build2360 and enabled the SD-WAN feature. However, we are unable to create a zone or select the WAN interfaces to be added. I tried following the SD-WAN guide, but we already get stuck at selecting the interfaces.

Kind regards,

Tom

[adambomb1219]

You can't add the interfaces to the SD-WAN engine if they are references anywhere else in the firewall config (routing, policies, etc.).  They need to be removed from those areas, added to SD-WAN, and then you can recreate all of those objects.  

That being said SD-WAN won't be some magical fix for your issue.  "occasional disconnects" meaning what?  Clients?  Outbound internet?  What is your failover mechanism today between the two providers?

Also why are you running such a new version in production?

[CustomX]

Hmm, the WAN interfaces are being referenced unforunately.

Our internet connectivity drops for several seconds and then returns, so if we can determine there is packet loss on the WAN link, that would help us verify with the provider.

We have 2 WAN links - 1 actively used for us and 1 used for guest and other tenants. If our main WAN has an outage, we manually failover (no load balancing needed).

It's a new install, so wanted to make sure I was on the latest version. This version was available for download.

[pgautam]

Hi @CustomX 

In addition to this, in 7.4.0 FortiOS there is a feature to migrate the interface to the SDWAN without deleting all the references.

Please check the below link for configuration reference:-

https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/885870/interface-migration-w...

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Migrate-Physical-Interface-to-SDWAN-zone/t...

Regards
Priyanka

- Have you found a solution? Then give your helper a "Kudos" and mark the solution

[seshuganesh]

If you want to add interface to sdwan, make sure there are no references for that wan link. You can remove the references and try to add again.

Yeah sdwan can monitor the SLA of the link and generate alerts when the link is down.