The SD-WAN overlay template helps to prepare SD-WAN deployments. To complete the tasks performed by the SD-WAN overlay template, the administrator…

The FortiManager SD-WAN overlay template automates the creation of the underlying network infrastructure, such as IPsec tunnels and BGP peering. However, it does not configure the traffic management logic or security enforcement. After the template is successfully run, the administrator must perform two mandatory post-run tasks for the SD-WAN to be functional:

1. Configure SD-WAN rules: These rules are essential for defining how traffic is steered across the member interfaces based on performance SLAs or other criteria.

2. Create policy packages: Firewall policies are required to permit and control traffic flowing through the newly created SD-WAN interfaces. These are managed in policy packages and must be assigned to the devices.

A. Configure routing through the overlay tunnels created by the SD-WAN overlay template.

The template itself configures dynamic routing (typically BGP) over the overlay, making this part of the template's automated task, not a manual post-run task.

C. Assign a hub id metadata variable to each hub device.

Assigning metadata variables is a prerequisite task that must be completed before running the template, as the template uses these variables to generate the configuration.

E. Assign an sdwanid metadata variable to each device (branch and hub).

Similar to option C, assigning metadata variables like sdwanid is a preparatory step performed before the template is run, not after.

1. Fortinet. (2023). FortiManager Administration Guide 7.4.0. "SD-WAN overlay template"

Page 645

"Post-run tasks". The document explicitly states: "After running the SD-WAN overlay template

you must complete the following tasks: 1. Configure SD-WAN rules. 2. Configure firewall policies." This directly supports options B and D.

2. Fortinet. (2023). FortiManager Administration Guide 7.4.0. "SD-WAN overlay template"

Page 638

Workflow Diagram. The diagram shows that "Configure SD-WAN Rules" and "Configure Firewall Policies" are distinct steps that occur after "Run SD-WAN Overlay Template".

3. Fortinet. (2023). FortiManager Administration Guide 7.4.0. "To create an SD-WAN overlay template:"

Page 639

Step 1. This section details the creation and assignment of metadata variables as a preliminary step

confirming that options C and E are pre-run tasks.

4. Fortinet. (2023). FortiManager Administration Guide 7.4.0. "To run an SD-WAN overlay template:"

Page 642. The BGP configuration is shown as part of the template's settings

confirming that routing configuration (Option A) is handled by the template run itself.