Skip to main content
Flamba
Flamba
New Member
October 13, 2016
Solved

I'm new! someone help me with my Fortigate 100D

  • October 13, 2016
  • 1 reply
  • 3689 views

Hello everyone, I'm a newcomer. I come from a sonicwall tz205! I'd need some tips for setting up a new fortigate 100d... :)

I will explain briefly the situation. I always had a very simple network. Now at work I have created a new network for voip phones.

 

At the moment so I have two physical networks. 

1 for PC in 192.168.1.0/24 

2 for voip phone 192.168.3.0/24

 

I had the interfaces on sonicwall x0 x1 x2 ... on the new fortigate 100d I do not have that kind of division.

I currently have 16 port switch hardware dedicated to the "LAN" with the address 192.168.1.0/24. How can I bind a port for the VoIP network? I neet to create a new interface ? zone ? vlan ? 

The other thing that I must say is that I wish the two networks were able to communicate.

I did several tests but I can not do a ping from one network to another.

 

Thank you all!

    Best answer by ede_pfau

    hi,

     

    and welcome to the forums.

    First, you can split up the LAN switch into single ports, or a smaller switch and some single ports. Besides, you could use any port for the VoIP LAN - the names are just labels, there are no restrictions on what you can do with it.

     

    Generally, traffic will only pass from one port to another if there is a policy for that. Without policy, no interconnect. That should be pretty common to any kind of firewall but just in case...

    Usually, you put your phones on a VLAN of it's own but running over the same cables in the office. You can create a VLAN interface on the LAN port to get both kinds of traffic into the FGT. Again, no traffic between VLANx and LAN if there is no policy for that.

    I definitely recommend reading up on how a FGT works in the 'FortiOS Handbook' on docs.fortinet.com. There are introductory chapters on the concepts of firewalling, VLANs, VPN, WiFi etc. etc. We cannot teach you the basics here on the forums; if you have specific questions, need pointers or need debugging, fellow users on the forums can help you.

    1 reply

    ede_pfau
    SuperUser
    ede_pfauAnswer
    SuperUser
    October 13, 2016

    hi,

     

    and welcome to the forums.

    First, you can split up the LAN switch into single ports, or a smaller switch and some single ports. Besides, you could use any port for the VoIP LAN - the names are just labels, there are no restrictions on what you can do with it.

     

    Generally, traffic will only pass from one port to another if there is a policy for that. Without policy, no interconnect. That should be pretty common to any kind of firewall but just in case...

    Usually, you put your phones on a VLAN of it's own but running over the same cables in the office. You can create a VLAN interface on the LAN port to get both kinds of traffic into the FGT. Again, no traffic between VLANx and LAN if there is no policy for that.

    I definitely recommend reading up on how a FGT works in the 'FortiOS Handbook' on docs.fortinet.com. There are introductory chapters on the concepts of firewalling, VLANs, VPN, WiFi etc. etc. We cannot teach you the basics here on the forums; if you have specific questions, need pointers or need debugging, fellow users on the forums can help you.

    Flamba
    FlambaAuthor
    New Member
    October 14, 2016
    ede_pfau thanks a lot for the answer.
    I was able to do what I wanted. :)
    I really love this firewall.

    I continue the test!



    ede_pfau
    SuperUser
    ede_pfau
    SuperUser
    October 14, 2016

    You're welcome. And I see you already tried out some formatting switches for posting...have fun!

    Terms & ConditionsAccessibility statement