SD WAN policy routing

Question

Hello, 
 
 I hope somebody can give me a hint... 
 
 I got a 18.5.2 with 2 seperate WAN links and I want some clients to use link1 default, failover to the second if it is not available. I also managed that, BUT: 
 
 I couldn't find a way to tell SD WAN routing to work only for WAN traffic. I could only find "Any" or other defined lists, but not WAN or something like that. And "Any" will send also trafic to other VLANs to the WAN link. Maybe I am missing something? 
 
 Thanks in advance

Vishal_R · Accepted Answer

Hi Florian B &ouml;swirth : Yes this is due to the SD-WAN rule containing Destination Any and Service also Any as per your information. In order to avoid forward local VLAN traffic on SD-WAN, you may tweak the route precedence. Maybe on your XG in your current precedence settings, SD-WAN has higher precedence. From the below help section details of "Routing settings: Internet and internal traffic" will be helpful to get more information. https://docs.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/Routing/SDWANPolicyRouting/index.html#routing-settings-internet-and-internal-traffic console>system route_precedence show console>system route_precedence set static sdwan_policyroute vpn

SD WAN policy routing

Top Replies

Submitted a Tech Support Case lately from the Support Portal?