FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
Jackie_T
Staff & Editor
Staff & Editor
Article Id 289206
Description

This article describes that the most common address families are IPv4 and IPv6. For BGP and MPLS, it is possible to have VPN-IPV4/IPv6 as well.

 

EVPN, VPNv4  and VPNv6 address family configuration tells what the supported routing information in a single BGP session is.

As of v7.2.0, the VPNv4 address family has been added to the supported address families.

As of v7.4.0, the EVPN and VPNv6 address families have been added to the supported address families.

Scope

FortiGate v7.2.x, v7.4.x and v7.6.x

Solution

Starting from v7.2.0 VPN-IPv4 and from v7.4.0 EVPN and VPN-IPv6 are supported by default and this feature is enabled by default.

 

Below are the command line settings:

 

In v7.2.0+:

 

config router bgp

    config neighbor

        edit <neighbor>

            set activate-vpnv4 enable

 end

 

In v7.4.0+:

 

config router bgp

    config neighbor

        edit <neighbor>

            set activate-vpnv4 enable

             set activate-vpnv6 enable     

            set activate-evpn enable      

end       

 

If the remote BGP neighbor does not support EVPN ,VPNv4 and VPNv6 address family, it is necessary to disable the feature by setting it to disable:

 

config router bgp

    config neighbor

        edit <neighbor>

            set activate-vpnv4 disable

            set activate-vpnv6 disable

            set activate-evpn disable

end