question

mneill avatar image
0 Likes"
mneill asked

Why can I not set a different Health Check IP between SD-WAN hubs in FortiSASE?

I have successfully configured a Private Access Hub in FortiSASE, but when I go to create a second Hub the Health Check has been automatically populated with the same Health Check IP Address configured on the first hub, and it is uneditable. How can I change this?

FortiSASESD-WAN
10 |600

Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

1 Answer

·
mneill avatar image
0 Likes"
mneill answered

Jitter, latency and packet loss measurements are periodically obtained for each Hub via the Health Check IP, so the same IP Address must be configured on each Hub for Health Check to function correctly.
We recommend configuring a Loopback interface on each Hub firewall with the same specific, otherwise-unused Private IP Address (i.e., 172.16.0.1/32) for Health Check use.

10 |600

Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

Write an Answer

Hint: Notify or tag a user in this post by typing @username.

Up to 10 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

Welcome to FortiAnswers

FortiAnswers is the space dedicated to FortiSASE and FortiOS questions and suggestions.

  • Please review the Community guidelines
  • If you are a moderator, please refer to the Moderation guidelines
  • If something in the above guidelines is unclear, please post your question to the Community Feedback space or the Moderators' space