Re: ospf vpn fortigate -juniper

ashukla_FTNT · 06-16-2015

leoiaco wrote:Hi Johan,it doesn't work [&:].Secondary IP on WAN interface-> ConfiguredIP Pool -> Configured2nd default route-> (same distance, different priority)ConfiguredI'm in this scenario FGT <-> switch <-> router isp1 (first route Distance:10, ...

ashukla_FTNT · 05-28-2015

99% the default gateway on the dmz server is somehting other than the FGT dmz port ip.Following is the logic why it works when source ip nat is enabled. When we enable source nat to outgoing interface, the packet send out of FGT will have a same subn...

ashukla_FTNT · 05-24-2015

One common reason is if you want to sniff the traffic (packet capture) or want to do flow debugging (for diagnostics)When traffic offloaded to network processor diag sniffer or debug can't show the packets as debugging ans sniffing runs on kernel (in...

ashukla_FTNT · 05-18-2015

For the secondary range 180.60.90.x the route in ISP modem should point towards wan1 ip.This is because in order for the Modem to route to 180.60.90.x the only physical path is through wan1. If 180.60.90.x network is configured as connected route in ...

ashukla_FTNT · 05-18-2015

Please post the routing and policy configuration.Make sure you have a policy allowing traffic with nat enabled.

User Statistics

User Activity

Re: New IP Public Range on same WAN interface

Re: Firewall VIP

Re: Asic-Offload

Re: Fortigate 80c second ip question

Re: Missing something with a FortiWiFi 90D - Need assistance

Re: ospf vpn fortigate -juniper

Re: FortiGate 80C - two ISP no routing

Re: VLANs cant go to the internet

Re: Redundant IPSec VPN Tunnel setup

Re: session helpers

Re: Port forward not working?

KCS

Fortinet Training Institute