Skip to main content
razer8388
razer8388
New Member
August 17, 2018
Question

Connect different network IP Segment - Fortigate60E

  • August 17, 2018
  • 1 reply
  • 8927 views

Hi

 

In my office, there have two different subnet. 192.168.78.x and another one is 192.168.58.x. Each of them are connect to the different router and different firewall, and one of them are using fortigate 60e. 

My question is, if I pull one cat 6 cable as a backbone to connect between this subnets, via fw, what is the feature that I can use at fortigate 60e to allow this two subnets communicate.

 

Thank you

    1 reply

    sw2090
    SuperUser
    sw2090
    SuperUser
    August 17, 2018

    You need three "Features".

     

    - an interface (physical or vlan) 

    - a route to each Subnet 

    - policies that allow the traffic 

     

    and you wil need this on BOTSubmit PostH sides!

    razer8388
    razer8388Author
    New Member
    August 17, 2018

    Thank you for the suggestion but previously I have done all the configuration as per mentioned but I cannot ping to each other.

    For routing I use static route to create the route for the subnet. I have read some of the suggestion from other forum to use policy route instead of static route.

    sw2090
    SuperUser
    sw2090
    SuperUser
    August 17, 2018

    It works with static routes, I have several different subnets behind several FGT here and I can access all of them even troough IPSEC Tunnel. And I only use static routes.

    Did you set route and policy on BOTH Sides? 

    What did you ping? If you want to ping your FGT from remote subnet you have to make sure that ping on that interface of your FGT is enabled too!

    Terms & ConditionsAccessibility statement