New Member

Question

About management IP settings in transparent mode

When building the following configuration in transparent mode, administrative access to Fortigate is not possible from PC1.

Do you know the solution?

PC1:192.168.10.1(vlan10)

PC2:192.168.30.1(vlan30)

Fortigate:192.168.20.1(vlan20)

PC1---vlan10---Fortigate---vlan10---L3SW---PC2

| |

vlan20 vlan20

|----------------------|

I want to perform management access to Fortigate by routing from PC1 (vlan10) via L3SW.

Ping/SSH/HTTPS are all possible from PC2 to Fortigate.

Ping is possible from PC1 to Fortigate, but SSH/HTTPS is not possible.

Staff

Hello taka12012,

Thanks for reaching out.

I am sure this will help.

Thanks

New Member

Thank you for answering.
Does this mean that the configuration described is not possible without using vdom?

Staff

I believe it can be done without defining VDOM. Everything will be considered one "VDOM" if you don't define any.

Staff

Hi @taka12012,

When you ping from PC1, what is the interface reply to that traffic on FortiGate. Please also refer to this document for FortiGate config in transparent mode https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/5aa37c8a-1a11-11e9-9685-f8bc1258b856/fortigate-transparent-mode-56.pdf

Regards,
Minh

Staff

It's a bit tricky to set management access on FGT Transparent Mode.

You may want to check docs send by Minh for more detailed deployment.

Usually when you have multiple VLAN going through FGT, you need to define forward domain.

So the traffic will not be broadcasted to other segment.

When you assign management IP on FGT TP mode, FGT basically listening on every interface.

It's simpler if you can enable multi VDOM.

1 NAT vdom for management access and 1 TP VDOM for the data.

Sign up