19 Questions
Which configuration section in FortiOS is used for SD-WAN specific configuration?
config system sdwan
What is the purpose of the 'config zone' section in FortiOS SD-WAN configuration?
To configure the member interfaces
What does the 'config health-check' section in FortiOS SD-WAN configuration refer to?
The health-check configuration
What are the two member interfaces configured in the 'config members' section of FortiOS SD-WAN configuration?
port1 and port2
What is the purpose of the 'config service' section in FortiOS SD-WAN configuration?
To configure the SD-WAN rules
What is the name of the first SD-WAN rule configured in the 'config service' section of FortiOS SD-WAN configuration?
Critical-DIA
What is the name of the second SD-WAN rule configured in the 'config service' section of FortiOS SD-WAN configuration?
Non-Critical-DIA
What is the purpose of the 'Integrate Interface' feature on the Interfaces page in FortiOS SD-WAN configuration?
To automatically replace references to individual interfaces with selected SD-WAN zones
What must be done before adding an interface as an SD-WAN member in FortiOS SD-WAN configuration?
Remove any configuration references to the interface
Which feature on the FortiGate GUI allows you to migrate an interface to SD-WAN?
Integrate Interface
What happens when you use the integrated interface feature to migrate an interface to SD-WAN?
The interface is replaced with a selected SD-WAN zone
When should you consider using the Integrate Interface feature on the FortiGate GUI?
When your configuration has a considerable number of references
What is the drawback of manually removing and adding references in a configuration with a considerable number of references?
It is time-consuming and disruptive to the network
What does FortiGate do if it can't replace a reference during the migration process?
FortiGate leaves the configuration node unchanged
Where can you find the Integrate Interface feature on the FortiGate GUI?
Interfaces page
What is the purpose of the Integrate Interface feature?
To migrate interfaces to SD-WAN
What does SD-WAN stand for?
Software-Defined Wide Area Network
What happens if the change does not apply to a configuration node during the migration process?
The configuration node is left unchanged
What can be a disadvantage of using the Integrate Interface feature?
It can cause network disruptions
Study Notes
FortiOS SD-WAN Configuration
- SD-WAN specific configuration is done in the config system sdwan section.
Config Zone Section
- The config zone section is used to configure the SD-WAN zone.
Config Health-Check Section
- The config health-check section is used to configure health checks for SD-WAN interfaces.
Config Members Section
- The config members section is used to configure two member interfaces for SD-WAN.
- The two member interfaces are typically a WAN interface (e.g., WAN1) and a backup interface (e.g., WAN2).
Config Service Section
- The config service section is used to configure SD-WAN services (e.g., application-based routing).
- The first SD-WAN rule configured in the config service section is the default rule.
- The second SD-WAN rule configured in the config service section is the -business-critical rule.
Integrate Interface Feature
- The Integrate Interface feature is used to migrate an interface to SD-WAN on the Interfaces page.
- Before adding an interface as an SD-WAN member, the interface must be configured and enabled.
- The Integrate Interface feature allows you to migrate an interface to SD-WAN without manual reconfiguration.
- When using the Integrate Interface feature, the interface is automatically replaced with an SD-WAN member interface.
- The feature should be used when there are many references to migrate, as manual removal and addition can be time-consuming and prone to errors.
- If FortiGate cannot replace a reference during the migration process, it will skip the reference and continue with the migration.
- The Integrate Interface feature can be found on the Interfaces page.
- The purpose of the Integrate Interface feature is to simplify the migration process by automatically replacing references with SD-WAN member interfaces.
SD-WAN and Migration
- SD-WAN stands for Software-Defined Wide Area Networking.
- If the change does not apply to a configuration node during the migration process, the migration process will skip the node and continue.
- A disadvantage of using the Integrate Interface feature is that it may not work correctly with complex configurations or custom references.
Test your knowledge of SD-WAN CLI configuration with this quiz. Learn about zones, members, and performance SLAs as you navigate through the various commands and configurations. Challenge yourself to correctly set up interfaces, zones, and health checks, and become an expert in SD-WAN CLI configuration.
Make Your Own Quizzes and Flashcards
Convert your notes into interactive study material.
Get started for free
