Hot!Routing on FGT100E

Author
Tindrli
New Member
  • Total Posts : 5
  • Scores: 0
  • Reward points: 0
  • Joined: 2018/06/08 01:27:37
  • Status: offline
2018/06/08 01:37:43 (permalink)
0

Routing on FGT100E

I have a problem which i can't figure out. I have isp-router-fgt-l3sw-access switches. L3 sw will do routing for 4 subnets. Fgt has inside and outside interface. Inside int on fgt is aggregated and has mngmt ip address. Uplink from l3 sw is configured as access vlan mngmt subnet. Defsult gw on the sw is the mngmt ip address of the fgt. I'm having thisnissuenwhereni can't figure out how to configure fgt to know about these 5 subnets.
Mngmt subnet: 10.10.20.0/24
User:10.10.20.0/24
Wifi: 10.10.30.0/24
Wifi guest: 10.10.40.0/24
Dmz: 10.10.50.0/24
Static route on the fgt to internet 0.0.0.0 0.0.0.0 public ip

Router will perform nat.
#1

2 Replies Related Threads

    mahesh secure
    Silver Member
    • Total Posts : 64
    • Scores: -1
    • Reward points: 0
    • Joined: 2015/12/10 01:04:48
    • Status: offline
    Re: Routing on FGT100E 2018/06/10 22:22:55 (permalink)
    0
    Hi
    you have to add route in fortigate.
     
    destination 10.10.20.0/24
    interface < fortigate to l3 switch interface>
    gateway < l3 switch ip address>
     
    you have to add all the network in l3 switch like this
     
     
    Regards
    Mahesh
     
    #2
    ede_pfau
    Expert Member
    • Total Posts : 5591
    • Scores: 376
    • Reward points: 0
    • Joined: 2004/03/09 01:20:18
    • Location: Heidelberg, Germany
    • Status: offline
    Re: Routing on FGT100E 2018/06/11 01:09:08 (permalink)
    0
    You could simply use a 'super-net' instead of adding one route for each subnet behind the L3 switch, like this:
    on FGT: internal port address = 10.10.20.1/16
    on L3 switch: uplink port address = 10.10.20.2/24
     
    background: for each 'directly connected' subnet the FGT adds a route automatically. The 10.10.x.x 'super-net' contains not only the mgmt-LAN but also all 10.10.y.x subnets behind the L3 switch.
     
    No changes necessary on the switch.
     
    Or, if you want to do it by the book, add 10.10.30.0/24,10.10.40.0/24,10.10.50.0/24 on the FGT as static routes. Gateway is the L3 switch uplink address (e.g. 10.10.20.2).
    Don't forget that you need policies to allow traffic from the subnets to the internet. As the switch does the routing between subnets you do not have control over inter-subnet traffic (which is a pity - let the FGT do the routing).

    Ede

    " Kernel panic: Aiee, killing interrupt handler!"
    #3
    Jump to:
    © 2018 APG vNext Commercial Version 5.5