Hot!Double routers with FortiGate on the LAN.

Author
ThatDudeFromNZ
New Member
  • Total Posts : 7
  • Scores: 0
  • Reward points: 0
  • Joined: 2019/07/03 14:37:28
  • Status: offline
2021/05/04 19:38:52 (permalink)
0

Double routers with FortiGate on the LAN.

Have a new new client and found they have a Fritzbox managing some analog phones and not willing to move so planning on putting FOrtiGate inside to manage LAN and leaving Fritzbox on the WAN but unsure of setup. 
 
WAN --> FritzBOX --> FortiGate -- > LAN
 
Would I assign the connection between FritzBOX and FortiGate their separate subnet then create a policy to send LAN traffic out this interface or would further config be required?
FritzBOX LAN1: 192.168.1.1
FortiGate LAN1: 192.168.1.2
 
Fortigate LAN2-6: LAN 192.168.10.0/24
 
Policy:
Incoming interface: LAN2-6
Outgoing interface: LAN1
all all etc
 
Would this work? appreciate any help
 
 
 
#1

3 Replies Related Threads

    countryman
    New Member
    • Total Posts : 3
    • Scores: 0
    • Reward points: 0
    • Joined: 2021/05/07 04:30:08
    • Status: offline
    Re: Double routers with FortiGate on the LAN. 2021/05/07 05:00:33 (permalink)
    0
    I'm watching this with interest as I have a similar situation.
    #2
    sw2090
    Expert Member
    • Total Posts : 972
    • Scores: 82
    • Reward points: 0
    • Joined: 2017/06/14 01:27:25
    • Location: Regensburg
    • Status: offline
    Re: Double routers with FortiGate on the LAN. 2021/05/11 08:01:11 (permalink)
    0
    The Interface your Fritz!Box is connectrd to is acting as you rWAN for internet then right?
    I have one site here that has a Fritz!Box as one WAN too. So Fritz!Box is connected to one of the WAN ports (but you could use any other port too) and I put it into sd-wan as I need some loadblancing to happen.
    Then there is just policies to allow traffic to flow that I need to be able to reach the Fritz!Box (like I need to access to Froitz fro HQ via S2S IPsec on the FGT) and it is fine.
    Just for inside services (like I had to to for ipsec) you then might have to do some port forwarding on the Frtz...
     

    -- 
    "It is a mistake to think you can solve any major problems just with potatoes." - Douglas Adams
    #3
    countryman
    New Member
    • Total Posts : 3
    • Scores: 0
    • Reward points: 0
    • Joined: 2021/05/07 04:30:08
    • Status: offline
    Re: Double routers with FortiGate on the LAN. 2021/05/14 04:07:20 (permalink)
    0
    Does the Fortgate have to be ethernet cabled to the Fritz router or can one do this using wi-fi and a Fritz repeater ?  Reason for asking is that I tried the latter and it failed to do any connnection from the Fortigate back to the router.
    #4
    Jump to:
    © 2021 APG vNext Commercial Version 5.5