Become a master of BGP and OSPF on FortiGate

Create a GNS3 account and download GNS3 and GNS3 VM, then install VMware. Enable GNS3 VM, set network adapters to bridge, obtain an IP, and prepare FortiGate VM in GNS.

Install FortiGate VM in GNS3 by adding the FortiGate appliance and configuring a static 192.168.161.160/24 management interface. Then initiate a BGP lab in GNS3.

Create a simple BGP lab in GNS3 with FortiGate devices, configure loopbacks, and advertise networks while verifying BGP up and routes learned.

Explore how route reflectors simplify iBGP by removing the need for full mesh, forming clusters of reflectors and clients, and propagating updates between hub and spokes.

Configure BGP route reflectors on FortiGate across HQ and branches. Advertise networks 192.168.1.0/24, 192.168.2.0/24, and 192.168.3.0/24 with redistribution and verify reachability.

Explore additional path and BGP ECMP design on FortiGate with dual ISPs, HQ and branch topology, IBGP multipath, and a lab scenario to ensure redundancy and load balancing.

Enable additional path on FortiGate route reflectors to advertise multiple BGP paths per prefix, identify unique paths, and select how many to advertise from hub to branch.

practice configuring route reflectors and additional path in bgp on FortiGate to enable ecmp multi-path across multiple isps, and verify with bgp summary and routing table checks.

Explore BGP attributes and status codes, including origin codes, AS path, next hop, and the effects of transitive versus non-transitive attributes, with data scope and internal ibgp considerations.

Master BGP and OSPF IPv4 redistribution in this lab, configuring connected, OSPF, and static sources, understanding BGP attributes, status codes, next-hop self, and route-reflector behavior.

Explain how to configure prefix lists and access lists to filter IP routes and traffic with permit or deny actions on IP addresses and subnets, including greater-than and less-than operators.

Explore RootMap, a flexible FortiGate feature for BGP, using match and set rules to filter or redistribute routes, and to permit or deny, while adjusting metrics, next hop, and origin.

Execute a FortiGate route-map lab to advertise 192.168.2.0/24 with local preference 200 and weight 10, then apply access-list rules and compare routing tables before and after deployment.

Configure BGP peering with neighbor range and group to simplify large-scale deployments, using auto-discovered neighbors and MD5 authentication, plus route maps, prefix lists, and IP filtering across branches.

Learn BGP timer and reset sessions on FortiGate, covering keep alive, hold time, background scan, administrative distance, cluster ID, default local preference, and soft and hard resets.

Simulate a multi-branch FortiGate lab that integrates BGP and OSPF across headquarters and disaster recovery sites, with MPLS, root reflector, redistribution, and ECMP for resilient connectivity.