Fortigate Home Lab: Create IPSec VPN Tunnel Using BGP with VTI

[@rajesh_shrestha]

it would be better if you have introduced the prefix network too, which is used to advertise the exact network subnet through BGP. config neighbor edit "example1" set capability-graceful-restart enable set soft-reconfiguration enable set remote-as 65007 set route-map-in "INcoming-Subnet" set route-map-out "OUTgoing-subnet" this would help to advertise only the interesting network both ways. helpfully video thanks.

[@sridharbvnl2101]

Nice video do you have same for OSPF ?

[@rjnasr8078]

Unfortunately I can't get bgp to work in the lab. complains the neighbour is administratively shutdown. tunnel comes up with static route.

[@NetSec]

It should be very straighforward for BGP. Is your IPSec tunnel up? Try it first without BGP to make sure network is connecting to each other using static route.

[@vishnuk9523]

I have two tunnels using (wan1 & wan2) from FortiGate101F to AWS and running BGP over tunnel. I want to influence traffic through specific tunnel1 if tunnel 1 goes down failover to tunnel2. How do I do please helm me I'm new to FortiGate.

[@NetSec]

you can use BGP to append a couple of as-path as the control where it goes.