New Member

Solved

Fortigate to AWS VPN usinf BGP

Forum|Forum|4 years ago
August 4, 2022
5 replies
8429 views

We have a 3rd party who uses AWS for their VPN

we have a Fortigate 601E

The configuration we received from AWS is using BGP, I tried configuring but will not come up.

I think the problem is with the provided local and remote addresses.

Inside IP Addresses
- Customer Gateway : 169.254.170.166/30
- Virtual Private Gateway : 169.254.170.165/30

In Phase 2 selectors when I try and eter the above,it comes back with

169.254.170.164/30 for both

and the tunnel will not come up.

If I change the Ip addresses to normal subnets, that reside at local and remote, the tunnel comes up, but of course it wont pass any traffic

FortiGate

Best answer by commsrbrad1

I found my problem, being relatively new to Fortigate. I was trying to put the Tunnel IP addresses in the Phase 2 selectors, instead of Global>network>interfaces

sagha

Staff

Hi commsrbrad1,

Pleaes have a look at this article explaining how to set up BGP:

https://community.fortinet.com/t5/FortiGate/Technical-Note-Dynamic-routing-BGP-over-IPsec-tunnel/ta-p/193955

You can add your IPSec and BGP config here for quick review.

Thanks,

Shahan

commsrbrad1Author

New Member

Can this setup only be done from CLi? I am trying to use the VPN wizard

sagha

Staff

Hi commsrbrad1,

Yes, you can do it from CLI as well.

Just make sure that firewall policies, VPN settings and BGP config is there.

Thanks,
Shahan

commsrbrad1AuthorAnswer

New Member

I found my problem, being relatively new to Fortigate. I was trying to put the Tunnel IP addresses in the Phase 2 selectors, instead of Global>network>interfaces

sagha

Staff

Hi commsrbrad1,

Good to know this. Please mark this thread as resolved if the issue is fixed using the article we shared.

Thanks,

Shahan

Sign up

Login with SSO

Login to the community

Login with SSO