ADVPN Setup- Hub and Spokes Wan Interfaces connected via L2 VPLS

Forum|Forum|2 years ago
May 21, 2024
4 replies
1561 views

I need to setup ADVPN (using iBGP) between a Hub and 10 Spokes. Hub to Spokes and Spoke to Spoke (shortcut tunnel) communication is needed.

Hub and Spoke's Wan Interfaces are connected via Layer 2 VPLS network.

Would you please advise if ADVPN setup is feasible in such topology where Hub and Spokes FTG's WAN interface is connected by Layer2 VPLS?

Thank you

Best answer by ozkanaltas

Hello @ad2104 ,

You don't need to do that configuration. Because your FortiGates are on the same broadcast domain. This configuration is for if your FortiGates isn't on the same broadcast domain.

ozkanaltas

Valued Contributor III

Hello @ad2104 ,

You can build this structure on VPLS infrastructure. You can review this document. This document shows how you can create advpn with config wizard. Config wizard creates everything on behalf of you.

https://docs.fortinet.com/document/fortigate/7.4.3/administration-guide/853412/ipsec-vpn-wizard-hub-and-spoke-advpn-support

https://docs.fortinet.com/document/fortigate/7.4.3/administration-guide/820072/advpn-with-bgp-as-the-routing-protocol

ad2104Author

Explorer

Hi @ozkanaltas ,

Thank you for your response and document links. Config wizard looks really good, I am sure it will help.

The other link mentioned to create a static route for WAN Interface, I am not sure what Gateway IP i can provide in case of VPLS infrastructure. Would you kindly suggest?

Thank you

ozkanaltasAnswer

Valued Contributor III

Hello @ad2104 ,

You don't need to do that configuration. Because your FortiGates are on the same broadcast domain. This configuration is for if your FortiGates isn't on the same broadcast domain.

Sign up

Login with SSO

Login to the community

Login with SSO