Technical Tip: Import (IPsec, BGP, SDWAN) configuration as template in FortiManager

[smkml]

Description

This article describes how to import and use each templates (IPsec, BGP, SDWAN) in FortiManager, especially on Hub and Spoke setup on the FortiGate. Sometimes troubleshooting on non-working setup can be challenging, if deployed from FortiManager using templates, for example is SDWAN Overlay. This can reduced the time for troubleshooting on FortiGate and FortiManager, and at the same time achieving the same goal to use a template for a new device moving forwards. 

Scope

FortiManager.

Solution

1. Make sure the configuration for IPsec, BGP and SDWAN are working correctly on FortiGate side.
2. FortiGate and ADOM version must match. 

For example: FortiManager version v7.4.7, ADOM version 7.4, where FortiGate must in v7.4.x.

3. Import each configuration as template on each IPsec, BGP and SDWAN section on Device Manager -> Provisioning Templates.

IPsec Template.

Go to Device Manager -> Provisioning Templates -> IPsec Tunnel -> More -> Import.

SD-WAN Template:

Device Manager -> Provisioning Templates -> SD-WAN -> More -> Import.

BGP Template:

Device Manager -> Provisioning Templates -> BGP -> More -> Import.

Combined all the templates into Template Groups, and add other templates such as System Templates or the CLI if necessary for the new device deployment installation.

Related articles:

Troubleshooting Tip: Install error failed due to Provisioning Template (error -999) 

Troubleshooting Tip: IPsec Template install does not show in Install Preview