How to configure Fortigate 60E VLAN from existing router

2 replies
6445 views

Hi, any video and tutorial ?

I get IP and from ISP A.

the external IP is

1.9.165.228/24

the VLAN 1 IP is 192.168.10.1/24

and VLAN 2 IP is 192.168.20.1/24

how can I configure both IP able to access to internet but unable to communicate ?

Thanks!

5.6

Benoit_Rech_FTNT

Staff

Hello,

1/ you should configure VLAN1 and VLAN2 on the FortiGate.

[ul]

If the traffic is untagged, then you should use 2 different physical ports.

if the traffic is tagged, then you can use the same physical port, and two subinterfaces of type VLAN[/ul]

2/ You should create two firewall policies

[ul]

VLAN1 -> internet

VLAN2 -> internet[/ul]

There will be no communication between VLAN1 and VLAN2 because they are on different interfaces, and no firewall policy to allow the traffic. Therefore, it will be denied by the 'implicit deny' policy

Best regrads, Benoit

rwpatterson

New Member

Welcome to the forums.

Make sure you check of the NAT option in the policy. Those RFC addresses won't get past the ISP gateway.

Sign up

Login with SSO

Login to the community

Login with SSO