Skip to main content
time4pj
time4pj
Explorer
April 1, 2022
Question

SSH to other VLAN?

  • April 1, 2022
  • 1 reply
  • 2089 views

Hi Folks, I want to do something simple, but I need guidance.  I am using a FortiGate 60E and I have two VLANS - 10.20.10.0 and 10.30.10.0.  My server 'Dave' has an ip of 10.20.10.99.  I want to use SSH from my other system that is 10.30.10.50.  

What do I need to do to be able to SSH from 10.30.10.50 to 'Dave' at 10.20.10.99?  General guidance is appreciated.

Thank you

1 reply

Markus_M
Staff & Editor
Markus_M
Staff & Editor
April 2, 2022

Hi,

 

you will need a firewall policy from interface VLANx to VLANy, in whichever way FortiGate is connected to these VLANs. Service on it can be "ALL", for security you should use only port 22, default of SSH or adapt the port that Dave is listening on.

destination and source address of the policy can be "ALL", for security you should also narrow down to the IP addresses 10.30.10.50 and 10.20.10.99.

That policy can have logging enabled, so you could trace when there is a hit on the firewall policy.

 

Best regards,

 

Markus

    Terms & ConditionsAccessibility statement