MENU
You have a FortiGate configuration with three user-defined SD-WAN zones and two members in each of these zones. One SD-WAN member is no longer in use in health checks and SD-WAN rules. You want to delete it. What happens if you delete the SD-WAN member from the FortiGate GUI?
An SD-WAN member may be removed using the FortiGate GUI once its configuration dependencies are cleared. Option A is the intended answer: FortiOS updates the member configuration and its associated forwarding entries as needed. Removal does not require the CLI, does not enforce a minimum of two members per user-defined zone, and does not automatically move the interface into the default virtual-wan-link zone. Those facts eliminate B, C and D. A working deployment can lose connectivity after this change if other services depended on routes through the deleted member; therefore an administrator should check static routing and member reachability, not simply the SD-WAN Rules or Performance SLAs tabs. FortiOS describes an SD-WAN member as a reference to an underlying physical or logical interface. Deleting the SD-WAN membership does not necessarily delete that underlying interface or its addressing. Before removing it, examine SD-WAN member references, health checks, firewall policies, SD-WAN zones and configured static routes. After the change, compare the active routing table and the available SD-WAN forwarding members. The answer assumes no outstanding dependency blocks the delete operation.
==========
Currently there are no comments in this discussion, be the first to comment!