FortiGate SDWAN with IPsec VPN

[@DailyFactsMY]

For source ip at sdwan members, need to use gateway ip of remote lan network ?

[@verifine-academy]

Source IP for SDWAN members should be one of the IP addresses in the encryption domain (traffic selector) of the VPN

[@eyeagura2308]

This is very helpful video. Thank you man

[@cmpunkalvarez2734]

This option to create vpn from sdwan zone doesn't appear in my fortigate what version do you use it ?

[@evianq5719]

hi, thanks for this nice video, are you able to share relevant cfg in cli format though?

[@verifine-academy]

Thanks for enjoying the video. Unfortunately we do not have the cli configuration. We will share when we redo this lab.

[@capjempol82]

Thank you for your tutorial.
But I still have issue, I can ping server site A from server site B, but RTO from server site A to server site B, may I know maybe there are step missing by me? I appreciate your help.
If you don't mind, may I know your email?
Thank You

[@m.imraniqbaal6912]

Hi 01:45 is this pre-shared key is the same as configured in IPSec tunnel already? So same key we'll put here?

[@gyimisgyimis]

The pre-shared key was the same for all gateways

[@livestronger1981]

I will assume you programmed the remote network and local network subnet group prior to all this? And that you had to do this on both sides of the office? Also, what model is this Forigate? Do the entry models handle this much processing services?

[@livingnetwork9115]

What if we have multiple spokes ? With multiple internet connections.

[@verifine-academy]

See this video tutorial: th-cam.com/video/zkaDwPqZU_k/w-d-xo.html

[@gendisayuningtyas1343]

If i configure in production firewall, is it possible internet down ?

[@verifine-academy]

Please come again. We didn't get your question well

[@smile841102]

Do I need to setup the VPN tunnel ip or not?

[@verifine-academy]

a VPN tunnel IP is required if you want to configure a dynamic routing protocol over the tunnel