Hi everyone,
Actually, i need to have a iBGP session between a Fortigate and a Cisco router.
The session is working with this configuration :
Fortigate :
config router bgp
set as 65000
config neighbor
edit "192.168.10.1"
set remote-as 65000
set send-community6 disable
set update-source "switch"
next
end
config network
edit 2
set prefix 172.16.1.248 255.255.255.248
next
end
set network-import-check disable
config redistribute "connected"
end
config redistribute "rip"
end
config redistribute "ospf"
end
config redistribute "static"
end
config redistribute "isis"
end
config redistribute6 "connected"
end
config redistribute6 "rip"
end
config redistribute6 "ospf"
end
config redistribute6 "static"
end
config redistribute6 "isis"
end
set router-id 192.168.10.2
Cisco :
Router#sh run | sec router bgp
router bgp 65000
bgp log-neighbor-changes
neighbor 192.168.10.2 remote-as 65000
neighbor 192.168.10.2 description Session iBGP vers Fortigate 200B
neighbor 192.168.10.2 version 4
!
address-family ipv4
neighbor 192.168.10.2 activate
neighbor 192.168.10.2 soft-reconfiguration inbound
no auto-summary
no synchronization
exit-address-family
The iBGP session is OK :
Router#sh ip bgp sum
BGP router identifier 172.16.1.254, local AS number 65000
BGP table version is 2, main routing table version 2
1 network entries using 120 bytes of memory
1 path entries using 52 bytes of memory
2/1 BGP path/bestpath attribute entries using 248 bytes of memory
0 BGP route-map cache entries using 0 bytes of memory
0 BGP filter-list cache entries using 0 bytes of memory
BGP using 420 total bytes of memory
BGP activity 1/0 prefixes, 1/0 paths, scan interval 60 secs
Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd
192.168.10.2 4 65000 261 229 2 0 0 03:45:50 1
The Fortigate announces a network : 172.16.1.248/29.
The BGP table of the Cisco router is OK :
Router#sh ip bgp
BGP table version is 2, local router ID is 172.16.1.254
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop Metric LocPrf Weight Path
*>i172.16.1.248/29 192.168.10.2 100 0 i
But the routing table of the router is very strange :
Router#sh ip route
Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
E1 - OSPF external type 1, E2 - OSPF external type 2
i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
ia - IS-IS inter area, * - candidate default, U - per-user static route
o - ODR, P - periodic downloaded static route
Gateway of last resort is not set
192.168.10.0/30 is subnetted, 1 subnets
C 192.168.10.0 is directly connected, FastEthernet4
172.16.0.0/29 is subnetted, 1 subnets
B 172.16.1.248 [200/0] via 192.168.10.2, 03:46:52
C 10.0.0.0/8 is directly connected, Vlan1
Indeed, the network 172.16.0.0/29 doesn't correspond to the network 172.16.1.248/29.
Did you ever see this problem (just a display problem) ? And how can I correct it ?
Thanks a lot
Romain
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1720 | |
1095 | |
752 | |
447 | |
234 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.