WAN1 Not Available for SD-WAN

[create_share]

Hi,

I am trying to add multiple WAN interfaces under SD-WAN Zone to distribute internet traffic but one of the two WAN interfaces is not available.

Is there a problem with 7.0.12?

How to use multiple WAN Interfaces to distribute internet traffic in this case? I need to use WAN1 for 192.168.1.0/24 and WAN2 for 192.168.2.0/24 and if WAN1 goes down, the traffic of 192.168.1.0/24 should automatically shift to WAN2 Interface.

Thanks.

[hgarara · Accepted solution]

Please check for references for that particular wan interface in GUI. References needs to be removed before adding wan interface as SDWAN member .

[kcheng · Accepted solution]

Hi @create_share 

If you have any existing reference to WAN1 (such as firewall policy or static route), the respective interface would not be visible as an option to be added to SDWAN. Please remove the respective references prior to adding the interface to SDWAN. For the steps to identify the respective, please refer to the following article:

https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Avoid-errors-when-adding-an-interfac...

[xshkurti · Accepted solution]

Yes, and any other related settings where that interface is used.

[hgarara · Accepted solution]

Please check for references for that particular wan interface in GUI. References needs to be removed before adding wan interface as SDWAN member .

[kcheng · Accepted solution]

Hi @create_share 

If you have any existing reference to WAN1 (such as firewall policy or static route), the respective interface would not be visible as an option to be added to SDWAN. Please remove the respective references prior to adding the interface to SDWAN. For the steps to identify the respective, please refer to the following article:

https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Avoid-errors-when-adding-an-interfac...

[create_share]

Means, I have to remove the default internet static route to add it to SD-WAN?

[xshkurti · Accepted solution]

Yes, and any other related settings where that interface is used.

[kcheng · Accepted solution]

Hi @create_share 

Yes, you will need to remove the default route. It would be recommended to do this onsite where you have direct access to the FortiGate. If you are using FortiOS 7.0.0 and above, you can opt to use the feature called "Integrate Interface" where most of the actions required to migrate the interface to SDWAN zone are automated;

https://docs.fortinet.com/document/fortigate/7.0.0/new-features/885870/interface-migration-wizard