Hello Experts, We have aaa.bbb.209.136/28 global IP address range by
provider. The connection is PPPoE.As wan1 IP address, aaa.bbb.209.142 is
set at unnumbered IP. At DMZ, aaa.bbb.209.137/28 is set.Everything works
at Fortigate 60E. Recently, we boug...
Hello Experts, Let us assume there is a SD-WAN aggregation with WAN-A
and WAN-B.Can we have a configuration so that only WAN-A is usedwhen
WAN-B bandwidth is less than a specific speed (eg. < 1Mbps)and WAN-B is
automatically taking out from the aggre...
Dear Experts, When IPsec VPN at IPsec aggregation with SD-WAN is down,
Trap fgTrapVpnTunDown(1.3.6.1.4.1.12356.101.2.0.302) is not
sent,although "VPN tunnel down" is enabled at SNMP events.For
information linkDown(2) of MIB 1.3.6.1.6.3.1.1.5 is sent....
Dear Experts, Here is my story for SD-WAN IPsec aggregation. The 2nd
line is disconnected and it is kept (disconnected).Temporarily whole
SD-WAN line is disconnected. I understand it.However, recovery takes
much time (more than 3-5 minutes).Can we sh...
Dear Experts,Are multiple lines used simultaneously at non-aggregation
SD-WAN? Here is my situation. Between SD-WAN Fortigates, there are L2
switch which limits 10Mbps bandwidth.iperf with UDP 10Mpbs runs at PC1
and the server is PC3.iperf with UDP 1...
Hello, Thanks for your reply.I could not find
1.3.6.1.4.1.12356.101.12.2.2.1.20 at Trap data in captured data.Is
Get-Request necessary to get value of 1.3.6.1.4.1.12356.101.12.2.2.1.20
? Best regards,
Dear Experts, I tried a lot.Change of IPsec DPD parameter could decrease
the recovery time. I changed retry interval as 1 sec. I would like to
know the influence by changing the value. Thanks in advance,
Dear Experts, I tried several things such as changing values of
parameters seen in CLI, including IPsec aggregation algorithm, however,
I do not see any improvements. In almost cases, it takes about 100s to
recover.(I judge it, by seeing continuous p...
Dear Krispin,Thanks.Let me bring my diagram again as seen in my 1st
post.4 PCs with difference IP address are used.PC1 --> PC3PC2 --> PC4I
tried several hash algorithms in both lowest SLA mode and manual one.I
also tried multiple iperf with different...
