InfoSecMonkey: No fluff. Just the config that works.

Category Archives: Routing

VRF Explained: Virtual Routing and Forwarding on FortiGate, Cisco and Juniper

VRF Explained: Virtual Routing and Forwarding on FortiGate, Cisco and Juniper

Learn virtual routing and forwarding (VRF), then build VRFs and route leaking on FortiGate, Cisco IOS XE and Juniper Junos with tested CLI.

Read More
The /31 Subnet: Myth or Standard? Network and Broadcast Addresses on Point-to-Point Links

The /31 Subnet: Myth or Standard? Network and Broadcast Addresses on Point-to-Point Links

Is the /31 subnet a myth? Learn how RFC 3021 drops the network and broadcast address, when to use /31 links, and when not...

Read More
FortiGate BFD: What It Is, When to Use It, and How to Configure It

FortiGate BFD: What It Is, When to Use It, and How to Configure It

Configure BFD on FortiGate to cut routing failure detection to under one second. Includes CLI steps for BGP, OSPF, and static route protection.

Read More
RFC 1918 Private Address Space: The Practitioner’s Guide

RFC 1918 Private Address Space: The Practitioner’s Guide

Enforce RFC 1918 on FortiGate to block private IP leaks. Configure ACLs and BGP filters to prevent routing collisions and secure your edge.

Read More
Configuring RIP on FortiGate: Neighbors, Authentication, and Route Control

Configuring RIP on FortiGate: Neighbors, Authentication, and Route Control

Configure RIP on FortiGate with MD5 authentication, neighbor settings, and route filters. Learn to secure RIPv2 adjacencies and control advertisements in FortiOS.

Read More
FortiGate Routing Objects Explained: Building Deterministic Route Policy with Access Lists, Prefix Lists, AS Path Lists, Community Lists, Route Maps, and Key Chains

FortiGate Routing Objects Explained: Building Deterministic Route Policy with Access Lists, Prefix Lists, AS Path Lists, Community Lists, Route Maps, and Key Chains

Configure FortiGate routing objects like access lists, prefix lists, and route maps. Learn the exact CLI to build deterministic BGP and OSPF policy on...

Read More
Creating and IP Addressing Scheme Design

Creating and IP Addressing Scheme Design

Master IP addressing scheme design with this practical framework. Learn VLSM, summarization, and segmentation rules to build scalable, secure network infrastructure.

Read More
Limitations of an AWS Peering Connection

Limitations of an AWS Peering Connection

Learn why AWS VPC peering drops outside routes and how to fix it with a Transit Gateway. Includes FortiGate config and cost estimates.

Read More
Deploying FRRouting on Ubuntu 24.04 LTS: Production BGP and OSPF Routing

Deploying FRRouting on Ubuntu 24.04 LTS: Production BGP and OSPF Routing

Configure FRRouting on Ubuntu 24.04 to build a production router. Learn step-by-step setup for OSPF backbone and eBGP sessions with route filtering and verification.

Read More
FortiGate Local-Out Routing: Controlling the Traffic the Firewall Sends Itself

FortiGate Local-Out Routing: Controlling the Traffic the Firewall Sends Itself

Master FortiGate local-out routing. Learn how to control self-originating traffic source IPs and egress interfaces using CLI overrides and route preferences.

Read More
Mastering Routing Administrative Distance: A FortiGate and Multi-Vendor Engineering Guide

Mastering Routing Administrative Distance: A FortiGate and Multi-Vendor Engineering Guide

Configure FortiGate administrative distance to control route selection. Compare AD values with Cisco, Juniper, and Arista to prevent blackholes and ensure correct failover.

Read More
What Is EVPN and VXLAN? A Practitioner’s Primer

What Is EVPN and VXLAN? A Practitioner’s Primer

EVPN and VXLAN explained: learn how the control and data planes work together in overlay networks. Understand VTEPs, VNIs, and where each technology falls...

Read More
OSPF Primer: Message Types, Areas, and FortiGate Troubleshooting

OSPF Primer: Message Types, Areas, and FortiGate Troubleshooting

Master OSPF FortiGate troubleshooting by understanding message types, area design, and adjacency states. Fix MTU mismatches and VPN routing issues with this practical guide.

Read More
Policy-Based Routing on FortiGate Firewalls – A Comprehensive Deployment Guide

Policy-Based Routing on FortiGate Firewalls – A Comprehensive Deployment Guide

Configure FortiGate policy-based routing for multi-WAN steering. Learn match criteria, rule ordering, and firewall policy interactions to avoid silent drops.

Read More
FortiGate SD-WAN SLA Testing: A Deep Dive Into Every Probe Type (Including the Ones Hidden in the CLI)

FortiGate SD-WAN SLA Testing: A Deep Dive Into Every Probe Type (Including the Ones Hidden in the CLI)

Configure FortiGate SD-WAN SLA probe types beyond the GUI. Use TCP, UDP, and TWAMP probes in the CLI for accurate path monitoring and steering.

Read More
Monkey Bites – SNAT Route Change

Monkey Bites – SNAT Route Change

Use the FortiGate snat-route-change setting to force session re-evaluation after routing changes. Learn how to fix stuck traffic and clear sessions.

Read More
InfoSec Monkey Lab – Update

InfoSec Monkey Lab – Update

Build a Proxmox Eve-NG lab for FortiGate SD-WAN, FortiNAC, and BGP testing. Configure multi-homed ISPs with WAN emulation for jitter and latency.

Read More
FortiOS Link-Monitor Gotcha

FortiOS Link-Monitor Gotcha

Stop FortiOS link-monitor from removing all static routes. Learn to use the set route command to track specific destinations without breaking other paths.

Read More