Fortigate Policy route AP

Forum|Forum|2 years ago
July 3, 2024
7 replies
3345 views

We would like to create a policy route to allow all users connected to an AP to route their internet traffic over a specific WAN port.

The AP is an aruba instant on connected to the same interal port as all clients, DHCP will be handled by the fortigate

How would we configure this? any help would be appreciated.

FortiGate

jhussain_FTNT

Staff

Hi,

Does the wireless user receive a separate subnet IP address from the DHCP server? If yes, you can setup a policy route that specifies the source wifi user subnet and outgoing interface to the WAN interface, as shown in the following document.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Configuring-the-firewall-Policy-Routes/ta-p/189996

Regards

Jamal Hussain

EtiennetAuthor

New Member

Thanks for your reply, on the Aruba we did test with NAT the Aruba then gives out a separate IP, the Aruba does not have a proper DHCP Server. its the Instant on Models.

This worked but the issue then is the Ipsec for these users don't work they are not able to access Hq via IPsec.. Not sure how to solve that.

hbac

Staff

Hi @Etiennet,

What does your policy route look like. It might be routing all traffic via WAN as policy route take precedence over static route. You can create another policy route to route traffic over IPsec tunnel if it matches HQ subnet.

Regards,