SD-WAN design

[longnguyen]

Can someone explain to me the difference and application scenarios between SD-WAN DUAL HUB Primary/Secondary and SD-WAN DUAL HUB Primary/Primary?

Note that I have 2 private data centers and different network spaces?

[Toshi_Esumi]

These two KBs explain the difference. If the resources are split to two HUBs, it's primary/primar. The secondary hub is just duplicate/backup of the primary.
https://community.fortinet.com/t5/4D-Documents/Multi-Datacenter-Primary-Secondary-Enterprise-SD-WAN/...
https://community.fortinet.com/t5/4D-Documents/Multi-Datacenter-Primary-Primary-Enterprise-SD-WAN/ta...

Toshi

[longnguyen]

if I have a file server located at HUB1 with IP 10.10.1.100 and a file server located at HUB2 with IP 10.200.1.100, the 2 file servers are synchronized with each other. So can the branches connect to File Server 10.200.1.100 with Pri/Sec model? Assuming Primary Gateway is still working normally.

[Toshi_Esumi]

First, the secondary is inactive while the primary is active.
Second, if IPs are different those FGTs would see them as different hosts in different subnets in the network.

So it wouldn't work with the P/S setup.

Toshi

[longnguyen]

My Fortimanager V7.6, with P/P type, can it still use the same AS Number?

Do I need to configure Neighbor when creating SD-WAN Overlay Template -Network Configuration (3/5)-Advanced on 2 HUBs.
Will the HUBs be automatically connected to each other using SD-WAN Overlay Template, because I have not built the SD-WAN model yet but I need to connect 2 HUBs together so I created Site-to-Site VPN on the device?

[longnguyen]

if I have a file server located at HUB1 with IP 10.10.1.100 and a file server located at HUB2 with IP 10.200.1.100, the 2 file servers are synchronized with each other. So can the branches connect to File Server 10.200.1.100 with Pri/Sec model? Assuming Primary Gateway is still working normally.