Fortinet black logo

Introduction

7.0.3
Copy Link
Copy Doc ID 271433d5-e829-11ec-bb32-fa163e15d75b:749083
Download PDF

Introduction

This document describes how to navigate SD-WAN configuration changes during upgrade of FortiManager from 6.4 to 7.0. After upgrading FortiManager from 6.4 to 7.0, you must modify the centrally managed SD-WAN configuration before installing the configuration to FortiGates due to the following design improvements available with SD-WAN 7.0:

  • Normalized interfaces used in the FortiManager 6.4 SD-WAN template have been replaced by named interfaces in the FortiManager 7.0 SD-WAN template.
  • Named interfaces in FortiManager 7.0 support meta fields.
  • Upgrade from FortiManager 6.4 to 7.0 clears the SD-WAN member interfaces from the SD-WAN template.

This guide describes how to upgrade FortiManager with an SD-WAN configuration from version 6.4.7 to version 7.0.3. In this example, the SD-WAN configuration is for the following managed FortiGates:

  • One FortiGate device acting as a hub
  • Two FortiGate devices acting as branches

As a design consideration, this document assumes an existing setup and initial state before upgrading FortiManager. After completing the upgrade of FortiManager to 7.0 and the process described in this document, the SD-WAN configuration is migrated and updated to the final state. Following is a summary of the initial and final states:

Before

After

  • FortiManager version 6.4.7 / ADOM 6.4 and FortiOS 6.4.7/6.4.8
  • SD-WAN central management mode is enabled
  • SD-WAN configuration installed to FortiGates
  • FortiManager version 7.0.3 / ADOM 7.0 and FortiOS 6.4.7/6.4.8 or 7.0.
  • SD-WAN central management mode is enabled
  • SD-WAN configuration installed to FortiGates

Following is a summary of SD-WAN changes between FortiManager 6.4 and 7.0:

Configuration

6.4

7.0

Gateway IP

Per-device mapping

Meta fields

Interfaces

Normalized Interface

Named Interface with meta field

Introduction

This document describes how to navigate SD-WAN configuration changes during upgrade of FortiManager from 6.4 to 7.0. After upgrading FortiManager from 6.4 to 7.0, you must modify the centrally managed SD-WAN configuration before installing the configuration to FortiGates due to the following design improvements available with SD-WAN 7.0:

  • Normalized interfaces used in the FortiManager 6.4 SD-WAN template have been replaced by named interfaces in the FortiManager 7.0 SD-WAN template.
  • Named interfaces in FortiManager 7.0 support meta fields.
  • Upgrade from FortiManager 6.4 to 7.0 clears the SD-WAN member interfaces from the SD-WAN template.

This guide describes how to upgrade FortiManager with an SD-WAN configuration from version 6.4.7 to version 7.0.3. In this example, the SD-WAN configuration is for the following managed FortiGates:

  • One FortiGate device acting as a hub
  • Two FortiGate devices acting as branches

As a design consideration, this document assumes an existing setup and initial state before upgrading FortiManager. After completing the upgrade of FortiManager to 7.0 and the process described in this document, the SD-WAN configuration is migrated and updated to the final state. Following is a summary of the initial and final states:

Before

After

  • FortiManager version 6.4.7 / ADOM 6.4 and FortiOS 6.4.7/6.4.8
  • SD-WAN central management mode is enabled
  • SD-WAN configuration installed to FortiGates
  • FortiManager version 7.0.3 / ADOM 7.0 and FortiOS 6.4.7/6.4.8 or 7.0.
  • SD-WAN central management mode is enabled
  • SD-WAN configuration installed to FortiGates

Following is a summary of SD-WAN changes between FortiManager 6.4 and 7.0:

Configuration

6.4

7.0

Gateway IP

Per-device mapping

Meta fields

Interfaces

Normalized Interface

Named Interface with meta field