Skip to main content
MERCANTEKNIK
New Member
December 6, 2023
Question

SWITCH LAN - LAN PROBLEM

  • December 6, 2023
  • 3 replies
  • 3963 views

Hello, I have a Fortigate 100F model 7.2.4 build firewall with two VDSL internet lines that we used with Bridge mode before. Now we use fiber internet with a DMZ connection. Without changing the Virtual Wan Link setting of the device, we made adjustments only on Wan 1, enabled it to exit via DMZ, and deleted the Wan 2 connection. There is no problem with our internet connection, but communication cannot be established between other networks such as the vlan switch lan we created in the interface and the network we actively use, even though we wrote the rules. When we assign a manual IP, we can access the network. Do you want to reset the device or do you know a solution? I tried Asymmetric Route but it didn't work. And in external connections, it cannot access the network without being connected to the network via VPN, RDP, SQL etc. ports. Modem DMZ and firewall settings are correct.

3 replies

ebilcari
Staff
Staff
December 6, 2023

It would be helpful if you draw a schema of the current network and the communication that is failing. As I understood, users in LAN are not reaching the servers in DMZ and the port forwarding/VIP to the servers are not working. Reset the devices will not help in this case, it may be something in the configuration.

Emirjon
MERCANTEKNIK
New Member
December 6, 2023

Ekran görüntüsü 2023-12-06 230215.png

hbac
Staff
Staff
December 6, 2023

Hi @MERCANTEKNIK,

 

If I understand correctly, VLAN 10.41.41.0 can't access LAN 192.168.1.0 network? 

 

You mentioned that when you assign a manual IP, you can access the network. So it doesn't work with DHCP? 

 

Regards, 

MERCANTEKNIK
New Member
December 6, 2023

Hi Dhcp server all lan open. 

MERCANTEKNIK
New Member
December 9, 2023

I set that port for the security cameras and the recorder. Actually, when I connect the camera recorder to the 18th port, it should communicate with the other network and see the cameras at the same time. This is what I am trying to do.

ebilcari
Staff
Staff
December 11, 2023

So you have a single mikrotik switch for all the devices and want to connect only the NVR in port 18 of the FGT? You can not span the broadcast domain (VLAN) through the ports of FGT like you do with a normal switch unless this model supports hardware switch. I would suggest to regroup your available ports and also consider creating new subnets for host that don't require L2 communication if you are short on available ports in the physical mikrotik switch.

Emirjon