topic Re: BGP not using the VIP in Firewall and Security Management

BGP not using the VIP

Dyslexic155 — Tue, 22 Nov 2022 13:46:50 GMT

Hello Guys,

Facing a strange issue here and would like to hear from you.

According to CP documentation, BGP communication should be done using the Virtual IP address not the Gateway one.

In my case, the communication is done using the gateway IP address, and this doesn't look like a normal behavior to me.

Any ideas?

Thanks in advance,

Re: BGP not using the VIP

Chris_Atkinson — Tue, 22 Nov 2022 14:20:42 GMT

Which version is the cluster deployed with, are the RouterID configured the same on both members as the VIP?

There are other potential causes that might be expedited via a remote session with TAC (cluster hide/fold/nat etc).

Re: BGP not using the VIP

Sorin_Gogean — Tue, 22 Nov 2022 21:47:58 GMT

Like others asked, did you configure it properly ?

We have set BGP and Router ID was set as ViP and all is well....

Can you provide more details,

Thank you,

Re: BGP not using the VIP

Lari_Luoma — Wed, 23 Nov 2022 01:34:30 GMT

Which version are you running?

Re: BGP not using the VIP

the_rock — Wed, 23 Nov 2022 02:50:23 GMT

Guys made a good point...did you make sure the router ID is same on both cluster members? Also, make sure AS number matches as well on other side to what you have configured on CP. I have access to few working BGP production environments and also have working one in the lab from CP to Fortigate, so can definitely verify all the settings for you.