On the SD-WAN Status page in Fireware v12.3 or higher, you can select to manually fail back connections for SD-WAN actions. You can also view a list of all SD-WAN actions configured on the Firebox and the mode, interfaces, and failback options for each action.
This topic explains SD-WAN status information and failback options for Fireware Web UI. For information about SD-WAN monitoring in Fireware Web UI, go to Interface Information and SD-WAN Monitoring.
For information about SD-WAN status information, manual failback, and monitoring for Firebox System Manager (FSM), go to SD-WAN Monitoring, Status, and Manual Failback (Firebox System Manager).
SD-WAN Actions List
SD-WAN actions in this list include:
- Global MWAN action — Automatically generated if more than one external interface is configured on the Firebox
- Other SD-WAN actions — Manually added on the Network > SD-WAN page
This information appears for each action:
Mode
For the Global MWAN action, the mode indicates the routing method specified in the multi-WAN configuration: Routing Table, Round Robin, Failover, or Interface Overflow.
For SD-WAN actions you manually added, the mode is Failover.
Interfaces
All interfaces that participate in the SD-WAN action appear. The interface name with bold text is the primary interface.
To change the primary interface:
- For SD-WAN actions that you manually added, in the SD-WAN configuration, move the interface up or down in the list.
- For the Global MWAN action, in the multi-WAN configuration, move the interface up or down in the list. You can only change the primary interface if Failover or Interface Overflow is selected as the multi-WAN routing method.
Failback Option
The failback option specifies how active and new connections fail back to the primary interface: gradually, immediately, or never.
For SD-WAN actions that you manually added, the failback option is configured in the SD-WAN action configuration.
For the Global MWAN action, the failback option is determined by the routing method selected in the multi-WAN configuration. If the multi-WAN method is Failover, the failback option on the SD-WAN Status page is Immediate failback. If the multi-WAN method is Routing Table, Round Robin, or Interface Overflow, the failback option on the SD-WAN Status page does not apply and appears as N/A.
In the SD-WAN action configuration, you can configure these options:
- Immediate failback — Active and new connections use the failback (original) interface
- Gradual failback — Active connections continue to use the failover interface; new connections use the failback (original) interface
- No failback — Active and new connections continue to use the failover interface. You might select this option if you want to confirm an issue is resolved before you fail back to the original WAN connection.
If you select Gradual Failback or No Failback in the SD-WAN action, you can initiate manual failback on the SD-WAN Status page. This procedure is described in the next section.
Initiate Manual Failback
You can select to manually fail back connections on interfaces that participate in an SD-WAN action.
In the SD-WAN action configuration, if the failback setting is Gradual Failback:
- On the SD-WAN Status page, you can select the Force Failback option.
- The Force Failback option terminates active connections and forces new connections to use the failback (original) interface.
In the SD-WAN action configuration, if the failback setting is No Failback:
- On the SD-WAN Status page, you can select Manual Gradual Failback or Manual Immediate Failback.
- The Manual Gradual Failback option keeps active connections on the failover interface and forces new connections to use the failback (original) interface.
- The Manual Immediate Failback option terminates active connections and forces new connections to use the failback interface.
Interface Information and SD-WAN Monitoring (Web UI)
SD-WAN Monitoring, Status, and Manual Failback (Firebox System Manager)