"Network Security Engineer with 7+ years of experience designing, deploying, and optimizing enterprise network solutions. Skilled in configuring and managing switches, routers, firewalls, and wireless access points from vendors such as Fortinet, Sangfor, Ruckus and Ruijie. Proven ability to troubleshoot complex network issues, implement best practices, and support scalable infrastructure for both on-premises and cloud environments."
I'm open to new opportunities, collaborations, and tech discussions. Feel free to reach out through any of the channels below.
Network Specialist
giparipradinaabdillah@yahoo.com
South Jakarta
A collection of my thoughts, configurations, and technical guides on enterprise network security, infrastructure design, and troubleshooting.
Learn how to establish a dynamic, scalable, and resilient site-to-site VPN connectivity between HQ, DC, and branch offices using Fortinet's ADVPN architecture.
A step-by-step walkthrough on optimizing Data Center network infrastructure for High Availability using Sangfor Next-Generation Firewalls.
Best practices for implementing, managing, and troubleshooting enterprise wireless networks across multiple branch locations.
Learn how to establish a dynamic, scalable, and resilient site-to-site VPN connectivity between HQ, DC, and branch offices using Fortinet's ADVPN architecture.
Auto-Discovery VPN (ADVPN) allows dynamically established IPsec tunnels between spokes (branch offices) in a Hub-and-Spoke architecture. This avoids routing traffic through the Hub, improving latency and reducing overhead.
Configure the phase 1 interface on the Hub firewall to listen for connections and enable auto-discovery sender:
config vpn ipsec phase1-interface
edit "advpn-hub"
set type dynamic
set interface "wan1"
set ike-version 2
set peertype any
set net-device enable
set proposal aes256-sha256
set add-route disable
set auto-discovery-sender enable
next
end
To ensure dynamic route exchange across the tunnels, IBGP is recommended. Configure BGP neighbors on the tunnel interfaces and ensure route reflectors are set up appropriately at the Hub site.