Fortigate - BGP peer groups

[canoas]

Hi all,

Do Fortigate Firewalls support "BGP peer groups" by sharing the same outbound policies and setting instead of configuring each BGP neighbor individually and updates replicated to all peer group members.

I can't seem to find any docs or commands that support BGP peer group config on a Fortigate like a Cisco or Arista Switch.

[funkylicious · Accepted solution]

hi,

maybe neighbor-group command is what you are looking here 

[Toshi_Esumi]

or, look at this recent conversation for examples.
https://community.fortinet.com/t5/Support-Forum/BGP-neighbor-group-implementation/m-p/393281#M269803

Toshi

[canoas]

There only seems to be a range option; i.e., you cannot stipulate the neighbor-group association under a peer config. With Cisco and Arista, however, you can do this. I would need to test to see if the range covers multiple /32 networks and how many entries can be added. In my setup, I don't want to add subnet ranges. This may be a FortiGate limitation. 

[Toshi_Esumi]

As mentioned in the thread, this part of BGP configuration feature is not in the standards. Each implementation by vendors can be different based on their own interpretation how this should work. As @Yurisk mentioned, you eventually need to test yourself to confirm the behaviors of FGT. No surprise if it's different from other vendors or your expectation.

Toshi