SD-WAN/ADVPN configuration

This section provides an understanding of the Fortinet Secure SD-WAN configuration.

The main objective of this section is to provide details on how to configure SD-WAN to cover the following use cases:

• ADVPN
• QoS

The following topics consider one FortiGate as datacenter and two FortiGates as branch offices. All the FortGates have two links:

• MPLS: To simulate a private connection from branch to datacenter
• INET: To simulate the local internet breakout

From the branches you will create an IPsec tunnel to the FortiGate datacenter for both the INET and MPLS links.

To configure a SDWAN/ADVPN deployment:

1. Add the devices to FortiManager.
2. Create the overlay configuration.
3. Configure the dynamic routes.
4. Enable central management.
5. CreateSD-WAN rules for Intelligent Application Steering and Link Fail-over.