Fortigate BGP Configuration

[johnlloyd13]

hi,

i'm migrating ASA BGP config to FGT and particular on re-using the 'no auto-summary', 'no sync' and 'redistribute static' commands.

i'd appreciate if someone can confirm if i need these command syntax/placement under FGT BGP are correct?

ASA:
router bgp 65101
 address-family ipv4 unicast
  neighbor 172.16.6.249 remote-as 65102
  neighbor 172.16.6.249 activate
  redistribute static
  no auto-summary
  no synchronization
exit-address-family

-----

FGT

config router bgp
 set as 65101
 set router-id 172.16.6.250

 set auto-summary disable
 set synchronization disable

config neighbor
 edit "172.16.6.249"
 set capability-graceful-restart enable
 set remote-as 65102
end

config redistribute "static"
 set status enable
end
end

[funkylicious · Accepted solution]

hi,

for redistributing static, yes - that would work

for auto-summary disable - this command is only available under config aggregate-address so by default if you dont configure it, subnets wont the aggregated disabled by default https://docs.fortinet.com/document/fortigate/7.4.0/cli-reference/528620/config-router-bgp#:~:text=se... 

for synchronization disable - yes, it's disabled by default https://docs.fortinet.com/document/fortigate/7.4.0/cli-reference/528620/config-router-bgp#:~:text=60... 

[johnlloyd13]

thanks for the info!

i'm glad the other 2 commands are by there by default.

[Toshi_Esumi]

To redistribute static routes,

config router bgp
  config redistribute static
    set status enable

  end
end

You can apply a route-map if you need to filter those static routes before redistribute into BGP domain.
As you figured out, it's disabled by default.

Toshi