Hello, we have a requirement to have a backup connectivity via Ipsec in case our MPLS P2P fails. I am trying to figure out how to do this since there are multiple vrf's involved.
The easiest way to achieve this would be to haveaBGP over ipsec per vrf and control the routing through BGP policies. But that would mean creating an Ipsec VPN for each vrf ?
Is there any easier way to do this ? Looking for some suggestions.
Thank you !
Hello,
Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.
Thanks,
If you have multiple VRFs configured on the Fortigate, then yes - creating IPsec tunnels, then associating each tunnel & BGP with a specific VRF is probably the only one (easy or not) way to do it.
User | Count |
---|---|
2534 | |
1351 | |
795 | |
641 | |
455 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.