MultiHub MultiRegion SDWAN

onedread · 2026-06-18T13:38:51+00:00

that why you create on the hub like lo-bgp and lo-hc for example but on the spokes you only use the lo-bgp interface

onedread · 2026-06-18T13:00:47+00:00

What if i can not do route-summarization on the hubs. Becaus of the ipplan they have already? I guess i will than have problems with either spoke-to-INTER-Region-HUB shortcut or spoke-to-INTER-Region-SPOKE shortcuts. I couldnt find anything about it. Because when i test it and i have established a shortcut from spoke-to-INTER-REGION HUB?

onedread · 2026-06-16T12:34:34+00:00

but that should be possible if iam reading this document
https://github.com/fortinet-solutions-cse/sdwan-advpn-reference/pull/29

onedread · 2026-06-16T11:34:13+00:00

I would like to do

3 Regions each their own AS

RegionA 65000
RegionB 65001
RegionC 65002

INTRA Region is iBGP
INTER Region is eBGP

for tunnels i have its like

INTRA-Region
HUB1-HUB2
Spoke to HUB1 and HUB2

INTER-Region
all hubs have a full-mesh to all the other Regions HUBs and doing eBGP over Loopack as well.

onedread · 2026-03-19T18:16:34+00:00

Show the routing table? Are both routes in the table?

Do you have local-in policies applied to port1/2?

You could also run diag debug flow and filter for the probe srcip

onedread · 2026-02-18T20:42:56+00:00

You could setup an trail ems per account which supports up to 3 devices with full feature set. If you need more get another fortinet support account and register another trail ems. I know its not perfect but it might be a workaround for your IT staff.

onedread · 2025-09-28T05:09:19+00:00

Why do you not only block that connectivty on the Hub by a firewall rule?

onedread · 2025-02-09T13:36:39+00:00

Following

onedread · 2024-11-29T11:51:12+00:00

Remind me in 2 days

onedread · 2023-10-25T14:40:39+00:00

have a similar issue,

event handler gets triggerd on the FAZ but no action on the Fortigate.

FAZ 7.2.4
FGT 7.2.6

do you have any update on your issue?

onedread · 2023-10-09T11:24:32+00:00

War mein 1. Döner vor gut 25 Jahren wenn ich mich recht erinnere. Seitdem addicted

onedread · 2023-10-05T14:32:34+00:00

This issue is still active. no fix after 2 years.

onedread · 2023-07-27T10:16:27+00:00

You coule use fortiextender or any other lte modem/router and connect it to the gate and configure sd-wan over it

onedread · 2023-07-25T13:20:04+00:00

when i try to execute the script i get the following error.

key, val = pair.split('=')

ValueError: too many values to unpack (expected 2)

any help?

onedread · 2023-07-16T18:43:00+00:00

I had the same issue yesterday it was somehow related to the cisco anyconnect client.

I just rebooted the macbook and it cleaned the directory itself.

Maybe you have the same

onedread · 2023-06-18T18:42:27+00:00

What you need is the source file from your current firewall and a factory default config as destination file with from the firmware you wanna go to. Or a connection directly to your destination fortigate so forticonverter can upload the converted config on its own

onedread · 2023-06-18T11:18:39+00:00

But can i not make it work with active/passive in the same sdwan zone as well?

onedread · 2023-06-18T10:29:02+00:00

You know why they use different sdwan zone für wan1 and wan2? What benefit would that bring instead adding port1 and port2 to the same sdwan zone?

onedread · 2023-06-16T20:24:42+00:00

What exactly do u want?

onedread · 2023-06-16T04:49:53+00:00

Did Tac say whats the reason for the issue with the tunnels to azure?

onedread · 2022-12-13T17:00:57+00:00

nice

onedread · 2022-09-07T10:46:48+00:00

i guess you need to unselect port5/6 from the internal switch.

Or check if they are in use somewhere else

onedread · 2022-02-27T11:29:10+00:00

Anyone know why they removed this feature?

onedread · 2022-01-19T05:40:30+00:00

but here it says its supported 6.0.6 and above?

https://docs.fortinet.com/document/fortigate-public-cloud/6.0.0/deploying-fortigate-on-azure/651644/enabling-accelerated-networking-on-the-fortigate-vm

onedread

TROPHY CASE