This again is so simple thank you for the reply. Makes perfect sense. ... View more

A colleague has just pointed out the obvious... wood and trees now comes to mind. The below seems to answer the question and negate the need for the MX to perform any dynamic routing. Why not just connect the FG to MPLS routers and INTERNET CE routers via a switched VLAN, the FG can then make the routing decision based on full routing information. The MX in that case just chucks everything at the FG and doesn’t get involved in anything too complex. ... View more

A colleague has just pointed out the obvious... wood and trees now comes to mind. The below seems to answer the question and negate the need for the MX to perform any dynamic routing. @MickeyDawson wrote: I have a requirement to receive an OSPF default route from an adjacent Fortigate firewall which is the local Internet gateway and WAN1. However for backup purposes we also have a MPLS internet route connected to WAN2. OSPF is configured to prefer the Fortigate as primary and the Fortigate is testing the Internet availability before advertising the default route so if it fails we route to the internet via the WAN2 MPLS.   I read that OSPF is only supported on PASS THRU which means the MX cannot support VLANS so this question is aimed at the NEW NO NAT feature i.e will this allow us to have dynamic routing so the above scenario can be adopted.   🙂   Why not just connect the FG to MPLS routers and INTERNET CE routers via a switched VLAN, the FG can then make the routing decision based on full routing information. The MX in that case just chucks everything at the FG and doesn’t get involved in anything too complex. ... View more

I have a requirement to receive an OSPF default route from an adjacent Fortigate firewall which is the local Internet gateway and WAN1. However for backup purposes we also have a MPLS internet route connected to WAN2. OSPF is configured to prefer the Fortigate as primary and the Fortigate is testing the Internet availability before advertising the default route so if it fails we route to the internet via the WAN2 MPLS.   I read that OSPF is only supported on PASS THRU which means the MX cannot support VLANS so this question is aimed at the NEW NO NAT feature i.e will this allow us to have dynamic routing so the above scenario can be adopted.   🙂 ... View more