Configure specific source IP in SLA detection of FortiGate sdwan

Configuration scenarios ：

This article will show you how to FortiGate SDWAN SLA The survival detection function configures the specified source IP Address .
For configuration IP General of address SD-WAN member , for example WAN Interface , The firewall will use the interface IP Address execution SLA Check . however , If there are some VPN The interface is not configured IP Address or configuration IP Address phase 2: when the stream of interest is not allowed , Then the firewall is executing SD-WAN SLA During the detection, you may encounter the problem that the normal detection fails .

Configuration steps ：

  By default , Created in the firewall VPN After the interface , There is no configuration IP Address .
If VPN Interface added to Secure SD-WAN Among members , And configuration Performance SLA To check VPN In tunnel state ,VPN Interface Performance SLA The detection status of the corresponding tunnel may be displayed as “down”, Something like the following ：

From the command line CLI Configure the specified source IP：

config system virtual-wan-link
config members
edit <ID>          // there ID Refers to the corresponding VPN Members after the interface is added ID
set source <IP address>          // Specify a specific source IP, be used for SLA State detection        
end
end 

Configure a specific source IP Go back to the page to see , You can see the corresponding Performance SLA Normal detection pass ：

---