Technical Tip: BGP is flapping

rbarnes · 03-20-2025

Description This article describes that the IPv4 address is not supported for a Peer ID setup for IPsec VPN tunnels. Scope FortiGate v7.2, v7.4, v7.6. Solution Configured is a Site-to-site dialup tunnel using Peer ID due to there being multiple tunne...

rbarnes · 03-17-2025

Description This article describes that wireless channels 120-128 on 5ghz in Canada, Mexico, Australia, Argentina, and Christmas Island are not selectable. Scope FortiGate v7.4, v7.6. Solution The reason why these channels are not selectable is they ...

rbarnes · 03-02-2025

Description This article describes how to match the traffc in debug flow output to an SD-WAN rule. Scope FortiGate. Solution To match debug flow output to an SDWAN rule, run diag firewall proute list and match it to the debug flow. Match the ID in th...

rbarnes · 02-19-2025

Description This article describes a scenario where a known good address is blocked by 'block failed SSLVPN logins autostitch'. See Technical Tip: How to permanently block SSL VPN failed login for the autostitch setup 'block failed SSLVPN logins auto...

rbarnes · 01-09-2025

Description This article describes a scenario where a BGP route comes from an unexpected interface. In this scenario, an IPsec VPN tunnel setup with BGP is used. Scope FortiGate. Solution A BGP route is coming from an unexpected interface. The expect...

User Statistics

User Activity

Troubleshooting Tip: The IPv4 address is not supported for Peer ID for IPsec vpn tunnels

Troubleshooting Tip: Unable to pick channel 120 on wireless 5ghz in Canada Canada, Mexico, Australia, Argentina and Christmas Island

Troubleshooting Tip: How to match debug flow to SD-WAN rules

Troubleshooting Tip: How to remove an IP from the SSL VPN 'block failed SSLVPN login autostitch'

Troubleshooting Tip: BGP route coming from an unexpected interface

Technical Tip: BGP is flapping

KCS

Fortinet Training Institute

User Statistics

User Activity

You are leaving our website