Technical Tip: BGP over an Azure Vnet VPN

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 204583

Description

This article describes how to configure a tunnel interface for BGP over Azure Vnet VPN.

Scope

Configuring a site-to-site VPN connection from a local FortiGate to an Azure VNet VPN via IPsec VPN with BGP.

Notice that the BGP neighborship is still down even after the tunnel is up.

Solution

Configure the BGP router-id as the local gateway and BGP peer IP as the remote IP.

config system interface

edit "azurephase1"

set vdom "root"

set ip <local-BGP-ID>

set tcp-mss 1350

set remote-ip <remote-neighbor-IP>

end

7985

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.