pre sales advice

Author
daddum
New Member
  • Total Posts : 3
  • Scores: 0
  • Reward points: 0
  • Joined: 2020/05/29 02:08:54
  • Status: offline
2020/06/04 06:37:20 (permalink)
0

pre sales advice

I have a customer who tells me he is going to use Fortigate 90D's
there is a SPT fibre ring with 2 x Fortigate 90's connected
the 90D's need to act as one i.e. VRRP
 
they also need to NAT to the inside also with VRRP on the inside interfaces
and they need to also support a DMZ also with VRRP
 
never used Fortigate before, will they do this ?
 

Attached Image(s)

#1

3 Replies Related Threads

    emnoc
    Expert Member
    • Total Posts : 5732
    • Scores: 371
    • Reward points: 0
    • Joined: 2008/03/20 13:30:33
    • Location: AUSTIN TX AREA
    • Status: offline
    Re: pre sales advice 2020/06/04 07:44:54 (permalink)
    0
    Not sure what you mean NAT to the inside  but vrrp is supported. Is your NAT a SNAT or DNAT or combination of the two?
     
     
    Ken Felix

    PCNSE 
    NSE 
    StrongSwan  
    #2
    Toshi Esumi
    Expert Member
    • Total Posts : 2160
    • Scores: 208
    • Reward points: 0
    • Joined: 2014/11/06 09:56:42
    • Status: offline
    Re: pre sales advice 2020/06/04 08:42:32 (permalink)
    0
    The diagram looks exactly like HA a-p setup if you replace the VRRP cable with a heart-beat cable. I'm not sure how the fiber-ring would work with VRRP-connected two FGTs.
    #3
    daddum
    New Member
    • Total Posts : 3
    • Scores: 0
    • Reward points: 0
    • Joined: 2020/05/29 02:08:54
    • Status: offline
    Re: pre sales advice 2020/06/04 08:47:20 (permalink)
    0
    it would be static NAT
    forgot to mention that the ring has a load of VLAN's on it
    in the past when i have done this i would usually use 2 switches on the ring and then connect each switch to both firewalls
    #4
    Jump to:
    © 2020 APG vNext Commercial Version 5.5