FortiGate SDWAN with IPsec VPN

Рет қаралды 17,909

Күн бұрын

This tutorial teaches how to configure SD-WAN between two locations with IPsec VPN tunnels as SD-WAN zone members on FortiGate.
--------- Contents of this Video ---------
00:00 Introduction
01:14 SD-WAN Zone and Members
02:29 Configure VPN Tunnels
03:21 Configure Static Routes
03:50 Configure Firewall Policies
05:02 Create SD-WAN Performance SLA
05:53 Configure Ping SLA Source
06:46 Configure SD-WAN Rules
08:00 SD-WAN Zone and Members
09:17 Configure VPN Tunnels
09:55 Configure Static Routes
10:28 Configure Firewall Policies
11:30 Create SD-WAN Performance SLA
11:53 Configure Ping SLA Source
12:34 Configure SD-WAN Rules
13:16 Testing
14:48 Conclusion
If you have any questions or need further assistance, please feel free to leave a comment below. Don’t forget to subscribe to our channel for more helpful tutorials.

Пікірлер: 15

@livestronger1981 2 ай бұрын

I will assume you programmed the remote network and local network subnet group prior to all this? And that you had to do this on both sides of the office? Also, what model is this Forigate? Do the entry models handle this much processing services?

@cmpunkalvarez2734 2 ай бұрын

This option to create vpn from sdwan zone doesn't appear in my fortigate what version do you use it ?

@m.imraniqbaal6912 11 ай бұрын

Hi 01:45 is this pre-shared key is the same as configured in IPSec tunnel already? So same key we'll put here?

@gyimisgyimis 11 ай бұрын

The pre-shared key was the same for all gateways

@DailyFactsMY 7 ай бұрын

For source ip at sdwan members, need to use gateway ip of remote lan network ?

@verifine-academy 7 ай бұрын

Source IP for SDWAN members should be one of the IP addresses in the encryption domain (traffic selector) of the VPN

@evianq5719 3 ай бұрын

hi, thanks for this nice video, are you able to share relevant cfg in cli format though?

@verifine-academy 2 ай бұрын

Thanks for enjoying the video. Unfortunately we do not have the cli configuration. We will share when we redo this lab.

@livingnetwork9115 Жыл бұрын

What if we have multiple spokes ? With multiple internet connections.

@verifine-academy Жыл бұрын

See this video tutorial: kzfaq.info/get/bejne/sNGRd9qB1sC5j58.html

@gendisayuningtyas1343 Жыл бұрын

If i configure in production firewall, is it possible internet down ?

@verifine-academy Жыл бұрын

Please come again. We didn't get your question well

@smile841102 5 ай бұрын

Do I need to setup the VPN tunnel ip or not?

@verifine-academy 4 ай бұрын

a VPN tunnel IP is required if you want to configure a dynamic routing protocol over the tunnel