We have recently enabled 100G links on our FortiGate firewalls towards
non-Fortinet devices. As we require to leverage existing OM3/OM4 LC
Duplex cabling, the FN-TRAN-QSFP28-BIDI optic was chosen on the
FortiGates. The other end is a Juniper QFX5120-...
As suggested by my contacts within Fortinet, I'm posting this on the
community page as well. In a network that is fully leveraging BGP for
any routing decisions by matching (extended) community strings, it would
be nice if the community string was ab...
I see no reason why you wouldn't be able to use the same method to
control traffic from WAN as well, either using the same community string
or using an additional one. It might need a bit more thought if you are
employing NAT with Virtual IP objects ...