Skip to main content
dagd
dagd
New Member
February 19, 2020
Question

newbie Lan and DMZ setup on 200e Virtual Domain

  • February 19, 2020
  • 2 replies
  • 9140 views

Hello

I have a question about DMZ and Lan setup on a Virtual Domain, see attach I did follow the instruction from cookbook "Protecting a web server with DMZ" Web server configuration is good, I cannot browse the internet from the Lan, any ideas?

Thanks

 

    2 replies

    Toshi_Esumi
    SuperUser
    Toshi_Esumi
    SuperUser
    February 19, 2020

    https://cookbook.fortinet.com/protect-a-web-server-with-dmz/index.html

    This cookbook you referred includes only configuration to make WAN->DMZ and LAN->DMZ work. You need a policy for LAN->WAN with NAT.

    dagd
    dagdAuthor
    New Member
    February 20, 2020

    yes that is correct,

    port1 to Internet

    port2 to DMZ

    port3 to lan

    I created a policy under IPv4 Policy from one of the cookbook, work in other VDom without a DMZ, but do not work in this setup.

    Toshi_Esumi
    SuperUser
    Toshi_Esumi
    SuperUser
    February 20, 2020

    So you're saying you have at least two vdoms: vdom1=internet port+lan port, vdom2=internet port(port1)+DMZ(port2)+lan(port3). Is it correct? This means you have two internet circuits. Basically vdoms are completely separate router/firewalls. If one port belongs to one vdom, it's not accessible from another vdom, unless you create vdom-links to bridge them together. Is this what you're trying instead?

    dagd
    dagdAuthor
    New Member
    February 24, 2020

    problem solve, I deleted everything and the recreated the whole configuration and now work!

    Terms & ConditionsAccessibility statement