Skip to main content
johnlloyd_13
johnlloyd_13
Explorer III
August 7, 2025
Solved

Fortigate BGP Configuration

  • August 7, 2025
  • 2 replies
  • 788 views

hi,

i'm migrating ASA BGP config to FGT and particular on re-using the 'no auto-summary', 'no sync' and 'redistribute static' commands.

 

i'd appreciate if someone can confirm if i need these command syntax/placement under FGT BGP are correct?

 

 

ASA:
router bgp 65101
 address-family ipv4 unicast
  neighbor 172.16.6.249 remote-as 65102
  neighbor 172.16.6.249 activate
  redistribute static
  no auto-summary
  no synchronization
exit-address-family

 

-----

 

FGT

 

config router bgp
 set as 65101
 set router-id 172.16.6.250

 set auto-summary disable
 set synchronization disable

config neighbor
 edit "172.16.6.249"
 set capability-graceful-restart enable
 set remote-as 65102
end

config redistribute "static"
 set status enable
end
end

Best answer by funkylicious

hi,

for redistributing static, yes - that would work

for auto-summary disable - this command is only available under config aggregate-address so by default if you dont configure it, subnets wont the aggregated disabled by default https://docs.fortinet.com/document/fortigate/7.4.0/cli-reference/528620/config-router-bgp#:~:text=set%20as%2Dset%20%5Benable%7Cdisable%5D-,set%20summary%2Donly,-%5Benable%7Cdisable%5D%0A%20%20%20%20%20%20%20%20next%0A%20%20%20%20end%0A%20%20%20%20config 

for synchronization disable - yes, it's disabled by default https://docs.fortinet.com/document/fortigate/7.4.0/cli-reference/528620/config-router-bgp#:~:text=60-,synchronization,-Enable/disable%20only 

2 replies

funkylicious
SuperUser
funkyliciousAnswer
SuperUser
August 7, 2025

hi,

for redistributing static, yes - that would work

for auto-summary disable - this command is only available under config aggregate-address so by default if you dont configure it, subnets wont the aggregated disabled by default https://docs.fortinet.com/document/fortigate/7.4.0/cli-reference/528620/config-router-bgp#:~:text=set%20as%2Dset%20%5Benable%7Cdisable%5D-,set%20summary%2Donly,-%5Benable%7Cdisable%5D%0A%20%20%20%20%20%20%20%20next%0A%20%20%20%20end%0A%20%20%20%20config 

for synchronization disable - yes, it's disabled by default https://docs.fortinet.com/document/fortigate/7.4.0/cli-reference/528620/config-router-bgp#:~:text=60-,synchronization,-Enable/disable%20only 

"jack of all trades, master of none"
    johnlloyd_13
    johnlloyd_13Author
    Explorer III
    August 7, 2025

    thanks for the info!

    i'm glad the other 2 commands are by there by default.

    Toshi_Esumi
    SuperUser
    Toshi_Esumi
    SuperUser
    August 7, 2025

    To redistribute static routes,

    config router bgp
      config redistribute static
        set status enable

      end
    end

    You can apply a route-map if you need to filter those static routes before redistribute into BGP domain.
    As you figured out, it's disabled by default.

    Toshi

    Terms & ConditionsAccessibility statement