Using the best quality strategy
The best quality strategy is based on the performance of your network. You can configure SD-WAN rules to dynamically route traffic through the SD-WAN interfaces that have the best link quality. The FortiGate uses the server information that you configured for link health monitoring against the quality criteria that you configure.
The FortiGate can measure link quality based on latency, jitter, packet loss, or bandwidth. For example, you can use the bandwidth options to configure a rule for applications that are primarily used for download and another rule for applications that are primarily used for uploading.
Configure the best quality strategy – GUI
- Go to Network > SD-WAN Rules.
- Select Create New.
- In the Name field, enter a name for the rule.
- In the Source section, set any of the following source parameters for matching incoming traffic from your organization’s internal network:
GUI option | Description | Additional configuration steps |
---|---|---|
Source address | Match traffic based on source IP address. |
|
User group | Match traffic based on users and user groups. |
|
- In the Destination section, set any of the following destination parameters for matching incoming traffic from your organization’s internal network:
GUI option | Description | Additional configuration steps |
---|---|---|
Address |
Match traffic based on destination IP address, destination port number, and type of service (ToS). If you configure this option, you can’t configure Internet Service or Application options. |
|
Internet Service |
Match traffic based on Internet Service Database (ISDB) address objects. You can configure Internet services and Internet service groups. If you configure this option, you can’t configure the destination Address options. |
|
Application |
Match traffic based on applications and application control groups. If you configure this option, you can’t configure the destination Address options. |
|
- In the Outgoing Interfaces section, configure the following criteria for choosing which SD-WAN member interface to route traffic through:
GUI option | Description | Additional configuration steps |
---|---|---|
Strategy | The strategy that you want the SD-WAN rules to use. | Select Best Quality. |
Interface preference |
One or more interfaces, in order of priority, that you want the FortiGate to use. If you select more than one interface, the FortiGate uses the first interface in the list until the quality of that link falls below the quality of the next interface in the list. Then it uses the next interface in the list. You can configure the link quality threshold in the CLI. The default is 10%.
Note that although the |
config system virtual-wan-link config service edit <rule_id> set link-cost-threshold <percentage> next end end
The range is 0 to 10000000. The default is 10. |
Measured SLA |
The name of the performance SLA that includes the servers that you want the FortiGate to use to measure the quality of the links. If you haven’t yet configured a performance SLA that you want to use, you can also use this option to create a new performance SLA. |
Select the name of the performance SLA from the drop-down list, or select + to create a new performance SLA. Select Close. |
Quality criteria |
The criteria that you want the FortiGate to use when it measures and compares the quality of the interfaces in the interface preference list, including latency, jitter, packet loss, downstream bandwidth, upstream bandwidth, and bidirectional bandwidth. You can also create a custom profile that allows you to use one or more of these as criteria. The FortiGate then uses the following formula to calculate link quality: (a*latency) + (b*jitter) + (c*packet loss) + (d/bandwidth). The larger the value, the more weight that criteria will have in the selection. Leave the weight value at zero to exclude that criteria from the equation. This field appears only if you select more than one interface in the Interface preference field. |
|
Configure the best quality strategy – CLI
In the CLI, an SD-WAN rule is called a service.
config system virtual-wan-link
config service
edit <rule_id>
set name <rule_name>
set addr-mode {ipv4 | ipv6}
next
end
end
Configure the source parameters:
CLI option | Description | Additional configuration steps |
---|---|---|
set {src | src6} <address_list>
|
This is the same as the Source address option in the GUI. | None |
set groups <group_list>
|
This is the same as the User group option in the GUI. | None |
Configure the destination parameters:
CLI option | Description | Additional configuration steps |
---|---|---|
set {dst | dst6} <address_list>
|
This is the same as the Address option in the GUI. The address list or address group list. |
None |
set protocol <protocol_number>
|
This is the same as the Protocol number option in the GUI. |
If you set a specific protocol, you might also need to set additional values, such as: set start-port <port_number set end-port <port_number> set tos <bit_pattern> set tos-mask <evaluated_bits>
For more information, see the FortiOS CLI Reference. |
set internet-service enable
|
This is the same as the Internet Service and Application options in the GUI. |
If you enable the internet-service option, set any of these options: set internet-service-custom <name_list> set internet-service-custom-group <group_list> set internet-service-id <id_list> set internet-service-group <group_list> set internet-service-ctrl <id_list> set internet-service-ctrl-group <group_list>
For more information, see the FortiOS CLI Reference. |
Configure outgoing interface parameters:
CLI option | Description | Additional configuration steps |
---|---|---|
set mode priority
|
This is the same as the Strategy option in the GUI. |
None |
set priority-members <member_sequence_list>
|
This is the same as the Interface preference option in the GUI. |
None |
set health-check <sla_name>
|
This is the same as the Measured SLA option in the GUI. |
None |
set link-cost-factor {latency | jitter | packet-loss | inbandwidth | outbandwidth | bibandwidth | custom-profile-1}
|
This is the same as the Quality criteria option in the GUI. |
If you set this to set latency-weight <weight> set jitter-weight <weight> set packet-loss-weight <weight> set bandwidth <weight> |