VPN with 500 cisco routers

[lrazmadze]

Hello,

I have to connect 500 cisco routers from different branches on my virtual fortigate firewall.

what is the best practice for routing?

[Toshi_Esumi]

Most of Cisco routers should support BGP and OSPF. We used to do that with eBGP probably up to 10 years ago. By that time we gradually replaced all of them (more than a hundred customers) to one of FGT models.

Toshi

[lrazmadze]

but what kind of vpn should I use?

[markdr_FTNT]

IPSec with BGP routing is best practice. Place BGP on Loopback adapters.

https://docs.fortinet.com/document/fortigate/7.4.0/sd-wan-sd-branch-architecture-for-mssps/53445/bgp...

https://community.fortinet.com/t5/FortiGate/Technical-Tip-ADVPN-with-BGP-on-loopback/ta-p/262007

[lrazmadze]

does ADVPN work between Fortigate and Cisco routers? or just in fortigate firewalls?

[Toshi_Esumi]

FTNT proprietary.
https://community.fortinet.com/t5/Support-Forum/Fortigate-Hub-Spoke-compatibility/m-p/291600

Toshi

[markdr_FTNT]

ADVPN is a proprietary protocol(s) so, no unfortunately it does not work with Cisco or any other 3rd party vendor.