FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
Karamjeet
Staff
Staff
Article Id 293503
Description

This article describes how the 'set passive' BGP commands for neighbor operate on a FortiGate.

Scope FortiGate.
Solution

Use the CLI below command:

 

config router bgp

    set router-id 10.21.7.155

        config neighbor

            edit "10.21.7.162"

                set passive enable [Default is disable]

            end

        end

 

When 'set passive' is enabled for the BGP neighbor, it means FortiGate will not initiate the TCP session for that neighbor.

 

Here is the example, for BGP neighbor 10.21.7.162, the passive command has been enabled, which forces it to not initiate the connection, but it responds to the packet received from the neighbor.

Capture.PNG

Contributors