Fortigate Home Lab: Create IPSec VPN Tunnel Using BGP with VTI

This video shows how you can use BGP on FortiGate's IPSec VTI (Virtual Tunnel Interface) to create VPN tunnel between two firewall/vpn gateways. Four simple step guide gets you a IPsec Tunnel and BGP dynamic routing protocol running on your VTI interface to update routes dynamically.
Related Post:
✍ Download and Launch Fortigate Virtual Machine in VMWare Workstation - blog.51sec.org/2022/01/downlo...
✍ blog.51sec.org/search/label/F...
Related Videos:
🌟 Create a Home VPN Lab Between Palo Alto and Fortigate Firewalls - • Create a Home VPN Lab ...
🌟 Step by Step Guide to Deploy Fortigate VM with Trial License in Azure - • Deploy Fortigate VM Fr...
🌟 Deploy Fortigate Firewall VM Using Azure Marketplace and From A VHD File with VM Size (1vCPU,1G RAM) - • Deploy Fortigate Firew...
🌟Create Fortigate Lab @ Home For Free with a Super Easy VPN Example - • Create Free Fortigate ...
💖Chapters:
0:00 - Introduction
1:18 - Lets start it - Lab Introduction
3:27 - 1. Create IPSec Tunnel Using Custom Template
6:00 - 2. Create Firewall Policy for VPN Traffic
9:30 - 3. Configure VTI Interfaces
10:30 - 4. Configure BGP
13:08 - 5. Testing
14:47 - 6. Troubleshooting
17:30 - End Scene
✅#51Sec #NetSec #Cyber #Security #CyberSecurity #HomeLab
======================================================================
If you found this video has some useful information, please give me a thumb up and subscribe this channel to get more updates:
⚡ruclips.net/user/Netsec?sub_...
⚡Resource Collection and Bookmarks: sites.51sec.org/
Learning and Sharing - 🔊海内存知己,天涯若比邻!
Discord: / discord , Blog: blog.51sec.org

[@rajesh_shrestha]

it would be better if you have introduced the prefix network too, which is used to advertise the exact network subnet through BGP.
config neighbor
edit "example1"
set capability-graceful-restart enable
set soft-reconfiguration enable
set remote-as 65007
set route-map-in "INcoming-Subnet"
set route-map-out "OUTgoing-subnet"
this would help to advertise only the interesting network both ways.
helpfully video thanks.

[@vishnuk9523]

I have two tunnels using (wan1 & wan2) from FortiGate101F to AWS and running BGP over tunnel. I want to influence traffic through specific tunnel1 if tunnel 1 goes down failover to tunnel2. How do I do please helm me I'm new to FortiGate.

[@NetSec]

you can use BGP to append a couple of as-path as the control where it goes.

[@rjnasr8078]

Unfortunately I can't get bgp to work in the lab. complains the neighbour is administratively shutdown. tunnel comes up with static route.

[@NetSec]

It should be very straighforward for BGP. Is your IPSec tunnel up? Try it first without BGP to make sure network is connecting to each other using static route.