IP-SLA for BGP connection ?

[douglas1942]

Hello, I have a BGP link on my Fortigate. 

We recently had a case whereby the L3 link was still up even though the Internet was unavailable.

Therefore,I want to set up an SLA (pinging to 8.8.8.8) to monitor that the Internet is up. If not, then I need to remove all BGP routes or shut down that link.

Is this going to be possible, or will the SLA only work with static routes ?

Thank you,

[distillednetwork]

If you are monitoring the WAN out one port and sharing BGP out another, you can use link-monitor to bring down the BGP interface using this:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Bring-other-interfaces-down-when-link-moni...

If you are using SD-WAN you can also use an SLA health-check to remove routes or make them less desirable with a route-map-out and route-map-out-preferrable.

https://docs.fortinet.com/document/fortigate/6.2.0/new-features/638759/bgp-route-map-and-selective-r...

I hope this helps