FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
akileshc
Staff
Staff
Article Id 225575
Description This article describes how to fine-tune BGP configurations to facilitate the fastest BGP route failovers on FortiGate.
Scope FortiGate.
Solution

BGP is perhaps the most widely used and dependable routing protocol on the Internet, and it even plays a significant role in linking large businesses. 
In this case, redundant routing mechanisms and the fastest route failovers in the setup are significant.

 

Configure the following timers to the lowest values as needed to enable the fastest route failovers:


scan-time, advertisement-interval, keep-alive-timer, and holdtime-timer.

 

CLI Syntax:

 

config router bgp
    set scan-time 'integer' <----- Background scanner interval(sec), 0 to disable it.(integer= Minimum value: 5 Maximum value: 60, Default:60)
end

 

config router bgp
config neighbor/neighbor-group
    edit 'ip'/'name'
        set advertisement-interval 'integer' <----- Minimum interval(sec) between sending updates.(integer= Minimum value: 1 Maximum value: 600, default:30).
        set keep-alive-timer 'integer' <----- Keep alive timer interval (sec).(integer= Minimum value: 0 Maximum value: 65535) (default: <Global BGP value>).
        set holdtime-timer 'integer' <----- Number of seconds to mark peer as dead. (integer= Minimum value: 3 Maximum value: 65535, or special:<0>) (default: <Global BGP value>)
end


Example:


config router bgp
    set keepalive-timer 5
    set holdtime-timer 15
    set scan-time 59
        config neighbor
             edit "10.10.20.1"
                 set advertisement-interval 2
                 set link-down-failover enable
                 set connect-timer 2
             next
        end

 

In the case of IPSec, there are 2 more values that can be modified under DPD (dead peer detection):

  1. Retry count (default: 3).
  2. Retry interval (default: 20 Seconds).