Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Products Best Practices Hardware Guides Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
    • More >>
    Unified SASE
  • Single Vendor SASE
  • Cloud Network Security
  • Secure Endpoint Connectivity
  • Web Application / API Protection
    • More >>
    Security Operations
  • Security Operations Automation
  • Identity
  • Early Detection & Prevention
    • More >>
    Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
  • Communication & Surveillance
    • Unified SASE
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Cloud Network Security
  • Cloud-Native Security
  • Web Application / API Protection
    • Security Operations
  • Security Operations Automation
  • Endpoint
  • Data Protection
  • Identity
  • Email
  • Early Detection & Prevention
  • Expert Services
  • Edge Firewall
  • Orchestration & management
  • SD Branch
  • Application Delivery
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Secure Private Access
  • Thin Edge
  • Identity
  • Application Gateway
  • Enterprise Asset Management
  • Endpoint Agent
  • Agentless Security Posture
  • Identity
  • Wireless
  • Switching
  • Identity
  • Privilege Acccess Management
  • Next Generation Firewall
  • Orchestration & management
  • Expert Services
  • All
  • All
  • Account Management
  • SAAS Management
  • SAAS Application Security
  • Managed Services
  • Platform as a service (PAAS)
  • Other SAAS Services
    • 4D Resources
    Solution Hubs
  • 4D Pillars
  • Cloud
  • Popular Solutions

    • SD-WAN / SD-Branch Architecture for MSSPs

    Home FortiGate / FortiOS 7.2.0 SD-WAN / SD-Branch Architecture for MSSPs
    7.2.0
    7.4.0
    7.2.0
    7.0.0
    6.4.0

    No inter-regional ADVPN

    No inter-regional ADVPN

    If inter-regional ADVPN support is not required, there is no longer need to preserve a BGP NH across the regions. The routing can be then optimized by summarizing the regional LAN prefixes on the Hubs.

    The following diagram follows the same LAN prefix 10.4.1.0/24, which is advertised by "site2-1" (from Region 2), and is propagated to "site1-1" (from Region 1) without inter-regional ADVPN support:

    As can be seen, the Hub in Region 2 ("site2-H1") now simply advertises a regional LAN summary (rather than a regional loopback summary!) towards the Hub in Region 1 ("site1-H1"), which in turn readvertises it towards its Spokes. All inter-regional traffic will then flow through the Hubs, like in any traditional multi-regional Hub-and-Spoke network.

    Previous
    Next

    No inter-regional ADVPN

    No inter-regional ADVPN

    If inter-regional ADVPN support is not required, there is no longer need to preserve a BGP NH across the regions. The routing can be then optimized by summarizing the regional LAN prefixes on the Hubs.

    The following diagram follows the same LAN prefix 10.4.1.0/24, which is advertised by "site2-1" (from Region 2), and is propagated to "site1-1" (from Region 1) without inter-regional ADVPN support:

    As can be seen, the Hub in Region 2 ("site2-H1") now simply advertises a regional LAN summary (rather than a regional loopback summary!) towards the Hub in Region 1 ("site1-H1"), which in turn readvertises it towards its Spokes. All inter-regional traffic will then flow through the Hubs, like in any traditional multi-regional Hub-and-Spoke network.

    Previous
    Next