BOVPN Virtual Interface with SD-WAN Routing

You can configure SD-WAN routing in a policy so the policy always routes traffic through a specific BOVPN virtual interface.

In this configuration example, a company has two sites connected by BOVPN virtual interface tunnels. Site A has one external network connection. Site B has two external network connections with different latency. This company wants to use SD-WAN to send latency-sensitive traffic, such as VoIP traffic, through the lower-latency tunnel.

This example does not show SD-WAN routing and failover based on loss, latency, and jitter metrics. To see a metric-based SD-WAN routing example with failover, see SD-WAN Failover from an MPLS Link to a BOVPN Virtual Interface Tunnel.

The configuration shown in this example requires Fireware v12.4 or higher.

In Fireware v12.3 or higher, SD-WAN replaces policy-based routing. In Fireware v12.2.1 or earlier, to route traffic to a different external interface, you must use policy-based routing. When you upgrade to Fireware v12.3 or higher, policy-based routing without failover is converted to an SD-WAN action with a single interface. Policy-based routing with failover is converted to an SD-WAN action with multiple interfaces. In Policy Manager, the policy-based routing setting is still available for backwards compatibility with older Fireware OS versions. For more information about policy-based routing, see Configure Policy-Based Routing in Fireware v12.2.1 or lower in the WatchGuard Knowledge Base.

Network Topology

This diagram shows the network topology for this configuration example.

Network topology diagram

How It Works

In this example, each Firebox has two BOVPN virtual interfaces to a peer Firebox. A custom SIP packet filter policy on each Firebox routes VoIP traffic through the BOVPN virtual interface that has the lowest latency. SD-WAN routing takes precedence over any other multi-WAN or BOVPN virtual interface routes.


See Also

About SD-WAN

Configure SD-WAN

About Link Monitor

Configure Link Monitor

Configure a BOVPN Virtual Interface

BOVPN Virtual Interface Examples

Configure BOVPN Virtual Interface IP Addresses