Fortinet white logo
Fortinet white logo

FortiGate NGFW to FortiSASE SPA Hub Conversion Deployment Guide

Loopback interface configuration

Loopback interface configuration

You must create a loopback interface on the FortiGate hub. The configuration uses the loopback interface to establish BGP peering with the FortiSASE security points of presence (PoP) to dynamically learn routes to your environment and provide a health check target for the performance SLA on the FortiSASE security PoPs.

Note

The following settings are only examples. Do not consider them as recommended settings.

To configure the loopback interface using the GUI:
  1. Go to Network > Interfaces.
  2. Click Create New > Interface.
  3. Create a new loopback interface using the following settings:
    1. In the Name field, enter Lo-BGP-RID.
    2. For Type, select Loopback Interface.
    3. In the IP/Netmask field, enter 10.1.0.254/255.255.255.255.
    4. Under Administrative Access, select PING.
    5. Click OK.

To configure the loopback interface using the CLI:
config system interface
    edit "Lo-BGP-RID"
        set vdom "root"
        set ip 10.1.0.254 255.255.255.255
        set allowaccess ping
        set type loopback
    next
end

Loopback interface configuration

Loopback interface configuration

You must create a loopback interface on the FortiGate hub. The configuration uses the loopback interface to establish BGP peering with the FortiSASE security points of presence (PoP) to dynamically learn routes to your environment and provide a health check target for the performance SLA on the FortiSASE security PoPs.

Note

The following settings are only examples. Do not consider them as recommended settings.

To configure the loopback interface using the GUI:
  1. Go to Network > Interfaces.
  2. Click Create New > Interface.
  3. Create a new loopback interface using the following settings:
    1. In the Name field, enter Lo-BGP-RID.
    2. For Type, select Loopback Interface.
    3. In the IP/Netmask field, enter 10.1.0.254/255.255.255.255.
    4. Under Administrative Access, select PING.
    5. Click OK.

To configure the loopback interface using the CLI:
config system interface
    edit "Lo-BGP-RID"
        set vdom "root"
        set ip 10.1.0.254 255.255.255.255
        set allowaccess ping
        set type loopback
    next
end