Skip to main content
aespinola
New Member
May 3, 2017
Question

Issues routing from VLAN to LAN

Hi!

 

I am having some issues with this current network design we have.

Main office: IP: 172.25.65.166/24 GW: 172.25.65.165

IP: 172.25.65.166/24 GW: 172.25.65.165

Data Center:

GW: 172.25.65.93 -----> vlan200 172.25.65.94/30 (port1)

The internal LAN on the FortiGate on the DC is 172.16.101.0/24

The FortiGate is in NAT mode.

 

I set the 172.25.65.0/24 in a static route so it gets out from the port1 using the GW of the DC.

I set the policy to allow the port1 traffic to be able to talk to the LAN with without NAT.

 

I see that the LAN and the VLAN200 show as connected routes on the Fortigate.

 

This should the traffic that I am trying to get

 

Office -----> DC GW -----> Fortigate VLAN 200 --------> Server on the LAN

 

I can reach my FortiGate on the DC but I can't reach any of the machines that are on the LAN even after I set the policy to allow traffic. Am I doing something wrong or missing something like a route?

 

Help is much appreciated

Thanks!

7 replies

EMES
New Member
May 3, 2017

It looks like you are on the same subnet with all those machines.

 

IP: 172.25.65.166/24 GW: 172.25.65.165

 

the /24 tells me you are using a 255.255.255.0 which means 172.25.65.1-254 are usable.

 

172.25.65.93 and 172.25.65.94 are on the same subnet as your main office.

 

How are the two offices connected? Using MPLS, Layer2, or IPsec tunnel?

aespinola
aespinolaAuthor
New Member
May 3, 2017

Yes, that is correct. I was told by the ISP that they (office and DC) are connected through Layer2 on a separate VLAN, in this case, is the VLAN that is on the port1 of the Fortigate on the DC.

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT