Skip to main content
Brenden
Explorer
August 29, 2024
Question

Fortigate Automation for OSPF and VPN Tunnels

  • August 29, 2024
  • 2 replies
  • 1594 views

Hi all,

 

I am looking for some guidance with setting up an automation with Fortigate. My goal is to create a stitch trigger that, when OSPF neighbor goes down, the action would be to disable the VPN Hub tunnel using a script that points to that tunnel. Then, when OSPF neighbor goes up, the action would be to enable the VPN Hub tunnel using a script again.

 

Unfortunately, I have not yet been able to trigger count this as I tried shutting the interface down and up.

 

Would anyone have an example of using OSPF to have neighbor status changed and which filter you used to do this? I think I have the action correct but not the trigger.

2 replies

AEK
SuperUser
SuperUser
August 29, 2024

Hi Brenden

Did you try event ID 20302 - LOG_ID_OSPF_NB_STAT_CHG ?

https://docs.fortinet.com/document/fortigate/7.2.9/fortios-log-message-reference/20302

Hope it helps.

AEK
lvangent
New Member
August 30, 2024

Hi Brenden,

Would a link-monitor not just be sufficient to change the routing in OSPF

and setup OSPF route metrics using Route-map and policy route?