Skip to main content
mofugga
mofugga
Visitor III
December 6, 2022
Question

PFsense (Netgate 4100) in front of a Fortigate

  • December 6, 2022
  • 1 reply
  • 1968 views

Hi,

I have normally run Fortigate in my home network however I am trying to set up a PFsense appliance (Netgate 4100) at the perimeter and set up my Fortigate behind it. When I connect my desktop to the PFSense appliance directly, I can access the Internet. However when I connect my desktop to my Fortigate and connect my fortigate to my PFsense appliance, I am unable to reach anything. When doing this, the default gateway for my desktop becomes 192.168.1.99 and it becomes a part of the subnet behind the fortigate. However, my PFsense appliance isn't assign a DHCP lease to my Fortigate and no traffic is being sent from my desktop to the Internet.

Any help would be appreciated.

Thanks,

JT

1 reply

seshuganesh
Staff
seshuganesh
Staff
December 6, 2022

As per the issue we could see, we are not fetching ip address from pf sense.

Lets focus whether we are sending DHCP request or not. You need to configure wan interface mode as DHCP only then we will get IP address from pf sense.

If you already configured it and if still not working, can you execute this command in the firewall :

diag sniffer packet <wan> 'port 67 or port 68' 6 0 a (where wan is firewall wan interface name)
can you execute this command in the firewall and share us the output

    mofugga
    mofuggaAuthor
    Visitor III
    December 6, 2022

    Hi,

    I do have the WAN interface mode set as DHCP only. When I execute 'diag sniffer packet wan2 port 67 or port 68' I get:

    JT-FortiGate-61F # diag sniffer packet wan2 'port 67 or port 68' 6 0 a
    interfaces=[wan2]
    filters=[port 67 or port 68]
    ^C
    0 packets received by filter
    0 packets dropped by kernel

    JT-FortiGate-61F # Timeout

     

    My PFsense appliance's LAN2 connection and my fortigate's WAN2 is where they are connected.

    Terms & ConditionsAccessibility statement