cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
4185
Views
10
Helpful
16
Replies

FTD eBGP default route into OSPF

Support ACME
Level 1
Level 1

Dear ALL,

 

I'm setting up the the two tier firewall architecture( internet facing firewall is fortinet and the second tier firewall is cisco FTD), i received the default route  0.0.0.0 0.0.0.0 from fortinet firewall via eBGP(fortinet(ASN:64520) and cisco(ASN:64450) is using EBGP connection), I had created the route-map in OSPF redistribution for default route, but i can't receive it from the internal switch.

Anyone can help?

 

Network Diagram

 

Fortinet(ASN:64520)->eBGP<-Cisco FTD(ASN:64450)->OSPF<-Cisco C3750E

 

Thanks.

 

Support

16 Replies 16

Dear Paul,

 

i got the other problem, now the BGP redistribute the default route to OSPF with

no always

is work, but in the reverse side, i found if the site A down, the default route is learn from site B, the FTD and the internal switch can learn the default route without problem, but the fortigate can't receive the default route. if i enabled "Generate default routes", this is permanently route even the cant recevie the from site B.

 

Friend can not find because between fortigate and FTD there is no OSPF there is BGP and you must config the FTD to redistribute the OPSF into FTD to make fortigate.

fortigate-BGP-FTD-ospf-Core SW


I see one solution before and it fit to your case, 
make BGP bypass FTD 
i.e. config eBGP between the Core and fortigate and config static route in FTD.