Fortinet black logo

FortiGate NGFW to FortiSASE SPA Hub Conversion Deployment Guide

Loopback interface configuration

Copy Link
Copy Doc ID b10d503a-c519-11ee-8c42-fa163e15d75b:236311
Download PDF

Loopback interface configuration

You must create a loopback interface on the FortiGate hub. The configuration uses the loopback interface to establish BGP peering with the FortiSASE security points of presence (PoP) to dynamically learn routes to your environment and provide a health check target for the performance SLA on the FortiSASE security PoPs.

Note

The following settings are only examples. Do not consider them as recommended settings.

To configure the loopback interface using the GUI:
  1. Go to Network > Interfaces.
  2. Click Create New > Interface.
  3. Create a new loopback interface using the following settings:
    1. In the Name field, enter Lo-BGP-RID.
    2. For Type, select Loopback Interface.
    3. In the IP/Netmask field, enter 10.1.0.254/255.255.255.255.
    4. Under Administrative Access, select PING.
    5. Click OK.

To configure the loopback interface using the CLI:
config system interface
    edit "Lo-BGP-RID"
        set vdom "root"
        set ip 10.1.0.254 255.255.255.255
        set allowaccess ping
        set type loopback
    next
end

Loopback interface configuration

You must create a loopback interface on the FortiGate hub. The configuration uses the loopback interface to establish BGP peering with the FortiSASE security points of presence (PoP) to dynamically learn routes to your environment and provide a health check target for the performance SLA on the FortiSASE security PoPs.

Note

The following settings are only examples. Do not consider them as recommended settings.

To configure the loopback interface using the GUI:
  1. Go to Network > Interfaces.
  2. Click Create New > Interface.
  3. Create a new loopback interface using the following settings:
    1. In the Name field, enter Lo-BGP-RID.
    2. For Type, select Loopback Interface.
    3. In the IP/Netmask field, enter 10.1.0.254/255.255.255.255.
    4. Under Administrative Access, select PING.
    5. Click OK.

To configure the loopback interface using the CLI:
config system interface
    edit "Lo-BGP-RID"
        set vdom "root"
        set ip 10.1.0.254 255.255.255.255
        set allowaccess ping
        set type loopback
    next
end