Fortinet FortiGate Series Administration Guide

Bi-directional Forwarding Detection (BFD) Router Dynamic
FortiGate Version 4.0 MR1 Administration Guide
376 01-410-89802-20090903
http://docs.fortinet.com/ • Feedback
set bfd enable
set bfd-desired-min-tx 50
set bfd-required-min-rx 50
set bfd-detect-mult 3
set bfd-dont-enforce-src-port disable
end
Disabling BFD for a specific interface
The previous example enables BFD for your entire FortiGate unit. If an interface is not
connected to any BFD enabled routers, you can reduce network traffic by disabling BFD
for that interface. For this example, BFD is disabled for the internal interface using CLI
commands.
config system interface
edit <interface>
set bfd disable
end
Configuring BFD on BGP
Configuring BFD on a BGP network involves only one step— enable BFD globally and
then disable it for each neighbor that is running the protocol.
config system settings
set bfd enable
end
config router bgp
config neighbor
edit <ip_address>
set bfd disable
end
end
Configuring BFD on OSPF
Configuring BFD on an OSPF network is very much like enabling BFD on your unit—you
can enable it globally for OSPF, and you can override the global settings at the interface
level.
To enable BFD on OSPF:
configure routing OSPF
set bfd enable
end
To override BFD on an interface:
configure routing OSPF
configure ospf-interface
edit <interface_name>
set bfd disable
end
end
Note: The minimum receive interval (bfd-required-min-rx) and the detection
multiplier (bfd-detect-mult) combine to determine how long a period your unit will wait
for a reply before declaring the neighbor down. The correct value for your situation will vary
based on the size of your network and the speed of your unit’s CPU. The numbers used in
this example may not work for your network.

Fortinet FortiGate Series Specifications

General

Model	FortiGate Series
Category	Firewall
Throughput	Varies by model
Interfaces	Varies by model
Concurrent Sessions	Varies by model
VPN Support	Yes
High Availability	Yes
Firewall Throughput	Varies by model
VPN Throughput	Varies by model
IPS Throughput	Varies by model
NGFW Throughput	Varies by model
Threat Protection Throughput	Varies by model
New Sessions per Second	Varies by model
Power Supply	Varies by model
Security Features	Firewall, IPS, Application Control, Web Filtering, Antivirus, VPN
Virtual Domains	Yes
Form Factor	Desktop, Rackmount