u/26Jack26

Advpn routing question

Hello everyone,

If I have lets say a Hub and spokes with 2 ISPs. For the ADVPN I will have 4 tunnels between each sopke and hub 1-1, 1-2, 2-1, 2-2....right?

Anyways my question is how is asymmetrical routing handle here? Hub might think one overlay is better, spoke might chose a different one. Hows is this handled?

reddit.com
u/26Jack26 — 3 days ago

Hello community, I found a situation that O couldn't comprehend 100%.

I have a SPA FG thats learning the FortiSASE users Subent (100.65.x.x) and my SPA FG has another iBGP peering (also a RR client) and for some reason the subnet is not advertised to that Fortigate. I had to configure a static route (100.65.x.x via IPSEC-SASE) and then one the network section, set the subnet to be advertised.

What am I missing here? Wouldn't BGP advertise this subnet in this case as both SASE POPS and my other FG are RR clients?

reddit.com
u/26Jack26 — 4 months ago

Hello community, I am looking into deploying templates on FMG but I have a concern.

Do templates get pushed once and thats it? or

Do they get pushed everytime I push anything from FMG?

What happens if I make a GUI change thats contrary to the template, what will take priority?

And most ciritcal concern:

For network changes that get sync from FG back to FMG, What happens if I make a routing change on a network setting locally on an FG, but that setting is managed from a Template in FMG?

reddit.com
u/26Jack26 — 4 months ago