Skip to main content
canoas
Visitor III
May 31, 2025
Question

Import configuration into Forti Manger, Routing objects and BGP

  • May 31, 2025
  • 1 reply
  • 912 views

Hi Community,

 

I have imported the configuration for 1 VDOM into Forti Manager (7.6) and after imported successfully, it's still at "modified" status.

 

I changed Routing objects and BGP directly on the Firewall, FGM and FGT immediately went out of sync, so hence I tried to import from FGT to FGM to get back into a sync status.

 

The policy imports successfully, but why aren't the routing objects such as Prefix Lists and Route Maps, static routes and BGP config are not updating on FGM? 

 

What am I missing here?

1 reply

xshkurti
Staff
Staff
May 31, 2025

Routing is primarily Device-Level, not Policy/Object Level
While Prefix Lists and Route Maps are objects, and dynamic routing protocols (BGP) are configurations, FortiManager typically manages them as device-level configurations or via provisioning templates, rather than as part of a "policy package" import.

The "Import Configuration" doesn't pull in the full routing table, BGP configuration, or standalone routing objects like prefix lists/route maps into the ADOM's shared objects if they aren't explicitly tied to a policy that's being imported.

This might be the reason you do not see them when importing through FMG.

canoas
canoasAuthor
Visitor III
May 31, 2025

Many thanks for your reply, and the info.

 

I have three VDOMs, and I have specifically configured PL, RM, and BGP for this particular VDOM only, which is out of sync. What I am concerned about is whether I push/install the policy my PL, RM's and BGP will be overwritten on the FGT (and there is a lot of config). But as you mentioned, this is not at the policy level so should be ok I hope!