Hello,
I have a BGP flapping issue between two Fortigate ISPs in standalone mode and my Fortigate firewall in HA mode. I need your help, and could you please provide the recommended configuration?
Thank you.
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
If disabling BFD changes the situation, the problem is on the other end. Check if it's even configured.
The command to see the BFD neighbor status seems to be
"get router info bfd neighbor"
Toshi
Hello,
I'm sorry for the delay, the same problem when we disabling the BFD.
KH
As I said previously, check the status of the other end. You need to troubleshoot with the ISP. At that time, you could open a ticket at TAC and co-op troubleshoot among them.
Toshi
Hello,
Thank you for your response.
Bellow the configuration for the Other End :
config router bgp
set as "public AS"
set router-id X.X.X.X
set holdtime-timer 240
edit "172.16.20.35"
set soft-reconfiguration enable
set prefix-list-in "PREFIXES_IN"
set prefix-list-out "PREFIXES_OUT"
set remote-as "Private_AS"
As you see BFD is not set. So leave it out on local end. And subnets are different (192.168.20.x and 172.16.20.35). There must be a routing device in between.
This troubleshooting requires getting in the FGTs and see what's going on then test something, which can't do over community posts. You have to open a ticket at TAC then let the TAC person to examine and troubleshoot this.
Toshi
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1547 | |
1031 | |
749 | |
443 | |
210 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.