ADVPN Setup- Hub and Spokes Wan Interfaces connected via L2 VPLS

[ad2104]

I need to setup ADVPN (using iBGP) between a Hub and 10 Spokes. Hub to Spokes and Spoke to Spoke (shortcut tunnel) communication is needed.

Hub and Spoke's Wan Interfaces are connected via Layer 2 VPLS network.

Would you please advise if ADVPN setup is feasible in such topology where Hub and Spokes FTG's WAN interface is connected by Layer2 VPLS?

 

Thank you

[ad2104 · Accepted solution]

Hi @ozkanaltas ,

Thank you for your response and document links. Config wizard looks really good, I am sure it will help. 

The other link mentioned to create a static route for WAN Interface, I am not sure what Gateway IP i can provide in case of VPLS infrastructure. Would you kindly suggest?

 

Thank you

[ozkanaltas]

Hello @ad2104 ,

You can build this structure on VPLS infrastructure. You can review this document. This document shows how you can create advpn with config wizard. Config wizard creates everything on behalf of you.

https://docs.fortinet.com/document/fortigate/7.4.3/administration-guide/853412/ipsec-vpn-wizard-hub-...

https://docs.fortinet.com/document/fortigate/7.4.3/administration-guide/820072/advpn-with-bgp-as-the...

[ad2104 · Accepted solution]

Hi @ozkanaltas ,

Thank you for your response and document links. Config wizard looks really good, I am sure it will help. 

The other link mentioned to create a static route for WAN Interface, I am not sure what Gateway IP i can provide in case of VPLS infrastructure. Would you kindly suggest?

 

Thank you

[ozkanaltas · Accepted solution]

Hello @ad2104 ,

You don't need to do that configuration. Because your FortiGates are on the same broadcast domain. This configuration is for if your FortiGates isn't on the same broadcast domain. 

[ad2104]

Thank you @ozkanaltas