Communication between FortiGate and UDM Unifi

[Franco2]

Currently, each router has two service providers (2) on each device. These infrastructures serve different tasks (Fortinet with operational functions and services on servers, and UDM, especially with Wi-Fi coverage).
It will be possible to communicate via OSPF, for example, between these routers to meet specific company needs. They intend to have these in different offices, but not all of them have two networks (physically).

[Robertdan99]

Yes, you can connect FortiGate and UniFi UDM using OSPF to share routes between offices, even if some locations only have one network. Here’s how:

1. Enable OSPF on Both Routers:

   • Configure the same OSPF Area (e.g., Area 0) on FortiGate and UDM.

   • Ensure both devices are in the same Autonomous System (AS).

2. Direct Connection (If Possible):

   • Use a cable between FortiGate and UDM (if in the same office) to exchange routes faster.

   • If separate offices, use a site-to-site VPN (IPSec) between them, then run OSPF over it.

3. Redistribution (If Needed):

   • If some offices only have one ISP, let OSPF advertise routes so traffic can flow between FortiGate (servers) and UDM (Wi-Fi).

     Why This Works:

     • OSPF automatically shares network info between routers.

     • Even if one office has only one ISP, OSPF ensures devices on both networks can talk.

     Note: If VPN is used, ensure OSPF traffic is allowed in firewall policies.

[zolepso1]

Finally coming back to this project, I'll probably pm you though. This makes sense to me, though I guess in my mind thr udmp was still doing all the routing, so it would go through it still and be less rework but maybe what I'm thinking isn't possible