Fortigate Automation for OSPF and VPN Tunnels

[Brenden]

Hi all,

I am looking for some guidance with setting up an automation with Fortigate. My goal is to create a stitch trigger that, when OSPF neighbor goes down, the action would be to disable the VPN Hub tunnel using a script that points to that tunnel. Then, when OSPF neighbor goes up, the action would be to enable the VPN Hub tunnel using a script again.

Unfortunately, I have not yet been able to trigger count this as I tried shutting the interface down and up.

Would anyone have an example of using OSPF to have neighbor status changed and which filter you used to do this? I think I have the action correct but not the trigger.

[AEK]

Hi Brenden

Did you try event ID 20302 - LOG_ID_OSPF_NB_STAT_CHG ?

https://docs.fortinet.com/document/fortigate/7.2.9/fortios-log-message-reference/20302

Hope it helps.

[lvangent]

Hi Brenden,

Would a link-monitor not just be sufficient to change the routing in OSPF

and setup OSPF route metrics using Route-map and policy route?