Skip to main content
lrazmadze
lrazmadze
New Member
July 17, 2025
Question

VPN with 500 cisco routers

  • July 17, 2025
  • 2 replies
  • 917 views

Hello,

 

I have to connect 500 cisco routers from different branches on my virtual fortigate firewall.

 

what is the best practice for routing?

2 replies

Toshi_Esumi
SuperUser
Toshi_Esumi
SuperUser
July 17, 2025

Most of Cisco routers should support BGP and OSPF. We used to do that with eBGP probably up to 10 years ago. By that time we gradually replaced all of them (more than a hundred customers) to one of FGT models.

Toshi

    lrazmadze
    lrazmadzeAuthor
    New Member
    July 18, 2025

    but what kind of vpn should I use?

    markdr_FTNT
    Staff
    markdr_FTNT
    Staff
    July 18, 2025

    IPSec with BGP routing is best practice. Place BGP on Loopback adapters.

    https://docs.fortinet.com/document/fortigate/7.4.0/sd-wan-sd-branch-architecture-for-mssps/53445/bgp-on-loopback

    https://community.fortinet.com/t5/FortiGate/Technical-Tip-ADVPN-with-BGP-on-loopback/ta-p/262007


      lrazmadze
      lrazmadzeAuthor
      New Member
      July 18, 2025

      does ADVPN work between Fortigate and Cisco routers? or just in fortigate firewalls?

      Terms & ConditionsAccessibility statement