Hello Experts,I'm curious about addition/change of alias name for
interface at SD-WAN.Here is our situation. At SD-WAN, we use IPsec
aggregation called "AGG" which consists of WAN1 and WAN2At first, we
confirmed both SD-WAN and AGG were established.N...
Dear Experts, I want to know the theoretical overhead of bandwidth when
IPsec aggregation is used at SD-WAN.For example, pure WAN1: 5Mbps, pure
WAN2: 3Mbps and pure WAN3: 2Mbps.Total is 10Mbps. All WANs is
IPsec-aggregated as SD-WAN. PC1 -- FG1(IPsec...
Dear Experts, At SD-WAN configuration, when manual mode is used, is "set
priority-members" of "config service" stronger than "set priority" of
"config members"?I tried several values and it seems to be such
thing.Also, how should we use the both, inc...
Hello Experts, I have an issue about site-to-site SD-WAN. Here is the
situation.There are 2 ipsec tunnels between 2 Fortigates.One tunnel
(called as X) is a simple ipsec tunnel.The other (called as Y) is a
ipsec aggregation tunnel which has 3 ipsec t...
Hello Experts, We have aaa.bbb.209.136/28 global IP address range by
provider. The connection is PPPoE.As wan1 IP address, aaa.bbb.209.142 is
set at unnumbered IP. At DMZ, aaa.bbb.209.137/28 is set.Everything works
at Fortigate 60E. Recently, we boug...
Hello, We created new zone called "SDWAN" (default is not used).WAN
interface itself is not down.Each IPsec tunnel of WAN is not down.IPsec
aggregation is not down.Only SDWAN is down after addition of alias. Red
sign is seen at performance SLA. The f...
Hello, I did not know iperf exists within Fortigate.We try to see if we
can get useful information. Anyway, theoretical information would be
practical to us. Best regards,
Dear Toshi, Thanks for your reply. I should have clarified more. The
values like 5Mbps means "1) just over the internet on each port" which
you are saying. We use VXLAN so that PC1 and PC2 belong to the same
network. iperf is used between PC1 and PC2...
Dear Experts, I increased the value of probe-timeout (from 500 to
1000ms) at health-check. It worked. (Y is seen as green.) My next
question is:Can we have the separate probe-configuration for each
tunnel?For example, 500ms interval and 500ms probe-t...
