Post

Fortinet SD-WAN


SD-WAN, or Software-Defined Wide Area Network, is a technology that simplifies and enhances the management and performance of WAN by using software-based control and automation to efficiently route and prioritize network traffic.



Network Topology

In this deployment, we’re gonna create a simple SD-WAN configuration to load balance traffic from LAN subnet to the Internet going through 2 ISPs

x



Configuring SD-WAN

First, this is the Interfaces configuration

x


Next create an SD-WAN Zone

x


After that craete an SD-WAN Member containing the WAN1 interface and attach it to the Zone

x


Then create another member for the WAN2

x


And this is how the SD-WAN configuration ends up being

x


On the SD-WAN Priority Rules, select the one your heart desires

x


Next create a Static Route going out to the SD-WAN Interface

x


And lastly, create a Firewall Policy to allow Local Subnet to reach the Internet through the SD-WAN Interface

x



Testing SD-WAN

Now from a PC on the local subnet, test the Internet Connectivity

x


And back on the Fortigate, we can see the traffic flowing through the SD-WAN Interface

x


We can also see the allowed policy for the internet connectivity which is using the SD-WAN policy created earlier

x


And because now it’s using SD-WAN, the traffic going out to the internet is load-balanced between the two ISPs

x


This post is licensed under CC BY 4.0 by the author.