Refer to the exhibits. Exhibit A - Exhibit B - Exhibit A shows the configuration for an SD-WAN rule and exhibit B shows the respective rule status, the routing table, and the member status. The administrator wants to understand the expected behavior for traffic matching the SD-WAN rule. Based on the exhibits, what can the administrator expect for traffic matching the SD-WAN rule?


Select an option, then click Submit answer.
Reference / correct answer:
The traffic will be routed over T_INET_1_0.
Most accepted answer: D. The traffic will be routed over T_INET_1_0.
Community votes: C=3, D=9
Selected Answer: C Because the gateway is enabled, Fortigate will not check if the member has a valid route to the destination, therefore MPLS will win because it has the most SLAs that are met. upvoted 11 times cabeza 2 years, 8 months ago It wont check for the "best route" with that setting, the route still needs to be there, after that it goes to SLA matching. upvoted 1 times ... draven76 3 years, 1 month ago Sorry, I have set up a specific lab to test it. The command "set gateway enable" is not enough to "blindly" send packets to the sd-wan member. You need to also "set default enable" to make it work in that way. upvoted 9 times ...
It wont check for the "best route" with that setting, the route still needs to be there, after that it goes to SLA matching. upvoted 1 times
Sorry, I have set up a specific lab to test it. The command "set gateway enable" is not enough to "blindly" send packets to the sd-wan member. You need to also "set default enable" to make it work in that way. upvoted 9 times
Selected Answer: D MPLS doesn´t has valid route for destination AND set gateway enable without also set default enable will not allow packets to flow to this member without a valid route. INET_1 has route and meets one sla target (0x1). INET_0 has route but doesn´t meet sla targets (0x0) upvoted 8 times
Selected Answer: D as per the chaos you can see in the comments, all revolves around the fact that "set gateway enable" ALONE is enough for the sdwan rule to use MPLS without a valid route. the confusion is due to lack of precision in most fortinet documentation: here https://community.fortinet.com/t5/FortiGate/Technical-Tip-Multiple-default-routes-where-SD-WAN-rules-are-not/ta-p/196237 you can find that to force traffic through an sdwan member with no valid route, you need BOTH set gateway enable and set default enable. upvoted 1 times