dialup hub and spoke with fortimanager

6 replies
260 views

Hi Community,

Can anyone share me the configuration guide to configure Hub and spoke dialup VPN with BGP with Fortimanager.

I wanted to configure this on Fortimanager.

Issue is my Spokes are not getting a IP from Hub during Negotiation.

I found the guide to do this via Firewall but not able to find any documentation to do this via fortimanager.

funkylicious

SuperUser

see if it helps, https://www.andrewtravis.com/blog/sd-wan-in-fortios-76

"jack of all trades, master of none"

Network_LearnersAuthor

New Member

@funkylicious thanks for the link.

This is not the one iam looking.

Iam looking to build a dialup hub and spoke with BGP on forti manager without SDWAN.

funkylicious

SuperUser

sdwan can be ignored or rather say, most of the hub and spoke tutorials that you will find either on Fortinet Docs or other blogs for this topic will be with sdwan.

you can ignore the sdwan part of the configuration and just take note of the other things.

for your spokes to get assigned a ip address on the ipsec interface you would need to configure config mode ( mode-cfg ) under phase1 , but i dont think it's really recommended that way. it's easier to assign static ip's to the spokes ( with meta variables assigned in FMG )

"jack of all trades, master of none"

Network_LearnersAuthor

New Member

I have Mode-cfg enable on my spokes and even configured start and end IP on my HUB, still spoke does not get IP from HUB.

Dialup HUb and spoke works fine if i use Static routes and no BGP.

I want this to be working with BGP and Automatic IP assignment on spokes.

any documents or guides are appreciated.