BGP between two remote FTD

[sherali mamatkarimov]

I have two Firepowers in two remote offices and i have two ISPs in each office, i had configured vti ipsec vpn between two offices but they are working with static routes, can i configure dynamic routing protocols for failover vpn? I tried to configure BGP but neighbours idle, what can you advice?

[Marius Gunnerud]

Have you changed from using the WAN interface IP to the VTI IP in the BGP neighbor command?

You would also need to preempt BGP AS on the backup VTI on both sides so that only one link (Primary link) is used.  if the primary link fails this configuration will now automatically failover to the secondary VTI.

[Rob Ingram]

@sherali mamatkarimov have you configured Send Virtual Tunnel Interface IP to the peers and Allow incoming IKEv2 routes from the peers under the VPN endpoint?

[sherali mamatkarimov]

I haven't this option

 

[Marvin Rhoads]

What are your software versions at both ends?