Hello,We have a 200D FortiGate (well, two in HA mode) with multiple
client VDOMs in NAT mode, each with their own VLAN (multiple servers,
SANs, typical data center stuff). Rather than allocating two ports for
each VDOM (LAN/WAN), we decided to use un...
This forum has been exceptionally helpful in the past, and I' m hoping
it can help me out again. Our client has two offices, Office A and
Office B. Here is what we have in Office A: A FortiGate (90D) with a VPN
to office B FortiGate (140D) A phone sy...
Ok architects and topology people that are also FortiGate experts. tl;dr
version: We have three FortiGate units at our disposal. We need hardware
failover/redundancy and connection load balancing/failover. Can this be
achieved without using HA, VDOMs...
Hi Fortigate people with KNOWLEDGE. I am trying to create an IPSec
tunnel to a Cisco ASA5520 (third party, so no access) from our FG 80C
4.0MR3. Here' s the basic configuration email I received from the Cisco
ASA5520 admin: We have a cisco ASA5520 wh...
[tl;dr version: VPN tunnel established between to FGs (101c/80c), cannot
access 80c network but can access 101c network, both vanilla FGs, 4.0M3
Zzzzzzzz] I admit defeat. Here is my issue. I have two VPNs set up, one
between a 110c and an 80c and one...
Thanks ede_pfau and emnoc. Here is the information you wanted. ede_pfau
Policy 2 should allow DHCP traffic across the tunnel (mirrors policy 2
on Office A' s FG). The " B VPN Group" contains both 192.168.101.0/24
and 10.10.20.0/24 and the " A VPN Gro...
So I haven’t been able to work on this much, but now that I have,
I’ve run into some problems. It doesn’t help I have a deadline that
was yesterday. As always, I can use any guidance available. I' ve
included a new image that hopefully clarifie...
Thanks again, emnoc. OK, I want to make sure I understand correctly, I
do need to create VLAN subinterfaces (VLAN 2 and VLAN 10) on the
FortiGate at Office B with an address of say 10.10.20.1/24 and
192.168.201.1/24? From there, I set multiple IP rel...
Thanks emnoc for once again providing a solution. I wasn' t too keen on
routing VLAN traffic through the VPN for a variety of reasons, and your
solution was exactly what I was looking for. I' m using route-based VPN
(always), and was hoping it would ...
I wanted to post the solution to this in case anyone else has something
similar (unlikely). First, thanks for everyone who helped with this
issue. I really do appreciate your willingness to help complete
strangers with sometimes exceptionally difficu...
