Sweet! I had attempted a similar config but on the hub-like fortigate I see reverse path failures although I had a policy route configured to get to the range at spoke-a-like, reason for the policy route is that I already have a vpn to another site that for the range at spoke-a so that uses the static route. ny traffic terminates at the hub and never traverse the spoke-b like tunnel
![[Fortigate] Hub-and-spoke ADVPN using IPsec VPN wizard/Dynamically add spokes using autoconfig key](http://i.ytimg.com/vi/Qyub1MACBBQ/mqdefault.jpg)
![[Fortigate] Hub-and-spoke ADVPN using IPsec VPN wizard/Dynamically add spokes using autoconfig key](/img/tr.png)
![[Fortigate] Redundant IPsec VPN with SD-WAN. SD-WAN IPsec tunnel](http://i.ytimg.com/vi/Ye4GUmcU_Ks/mqdefault.jpg)
![SD-WAN /Load Balancing/Link Failure/Dual ISP Configuration in Fortigate Firewall [7.x.x]](http://i.ytimg.com/vi/uzyVajI2c7w/mqdefault.jpg)
Sweet! I had attempted a similar config but on the hub-like fortigate I see reverse path failures although I had a policy route configured to get to the range at spoke-a-like, reason for the policy route is that I already have a vpn to another site that for the range at spoke-a so that uses the static route. ny traffic terminates at the hub and never traverse the spoke-b like tunnel
super, please show similar lab in Palo Alto too
very nice and useful video
Sweet! Thanks
Good vedio i have question if we asume there are 50 spoke in network then we have to create 50 tunnel or we can create dialup tunnel ?
hub-and-spoke ADVPN, can be configured to accommodate the dynamic spokes. Will cover in future video tutorials