Technical Note : BGP configuration example to forc...

gfranceschi · 12-14-2018

PurposeThis article describes an example of configuration and troubleshooting commands for SCTP multihoming through a FortiGate cluster (FGCP).DiagramSCTP Server192.168.1.1/24 10.0.1.1/24 ||Port1FortiGate clusterPort2|198.51.100.0/24 |Router||192.168...

gfranceschi · 12-11-2018

Description The article explains the IPSEC Anti-replay feature and how to prevent potential packet drops with it. Scope Any FortiGate version. Solution Anti-replay is a local setting for IPsec phase2. It is not negotiated between IPsec peers, meaning...

gfranceschi · 09-21-2018

PurposeThis article describes how to configure SNMP to query via SNMP the information from different Vdoms from an interface of the management Vdom.Expectations, RequirementsTo query information for a specific Vdom, the SNMP manager must add the Vdom...

gfranceschi · 11-07-2017

DescriptionWhen source NAT is not activated in the Firewall policy, the FortiGate applies the destination VIP and keeps the source IP of the sender if the traffic is going through the FortiGate on different interfaces. But if the traffic is received ...

gfranceschi · 11-06-2017

Description Under BGP, the '# config network' statement forces advertisement of a prefix. iBGP should only advertise a prefix if it is present in the routing table with an exact match.The BGP option 'network-import-check' allows to advertise a prefix...

User Statistics

User Activity

Technical Note: Configuration and Troubleshooting commands for SCTP multihoming through a FortiGate cluster (FGCP).

Technical Tip: Explaining IPSEC Anti-replay and preventing packet drops

Technical Tip: How to do a SNMP querie of BGP info from different Vdoms through the management interface on the management Vdom - example with BGP

Technical Note: IP address used by FortiGate to reach a unit protected by a VIP

Technical Tip: Advertise a BGP route not present in the routing table using network-import-check

Technical Note : BGP configuration example to forc...

Fortinet Training Institute

KCS