New Member

Solved

VLAN configuration

13 replies
27585 views

Dear All,

few months ago I configured VLAN on my network and it worked corectly. After I have changed router to FTG 80C (5.2.5) the VLAN stopped working. I use HP switch which supports VLAN - I didn't change the configuration on it. I use on FTG advanced routing.

Idea is:

LAN - 192.168.1.0/24

VLAN - 192.168.5.0/24 - access to Internet but no access to LAN

Fortigate 192.168.1.99 <-> hp switch 192.168.1.106 (VLAN 192.168.5.2) <-> tp-link switch (WAN 192.168.5.3)

I added on FTG VLAN interface 192.168.5.1 and policy VLAN -> WAN.

When I am connected to tp-link I have no access to Internet - I can ping 192.168.5.2 but I can't ping 192.168.5.1 (VLAN interface on Fortigate). I think that I should add some Static Routes or Policy Routes?

Thank You in advance,

Bart.

VLAN

scedaAnswer

New Member

Sorry for second post but I can only one attachment upload. Please see VLAN information form HP switch.

emnoc

New Member

Suggestion: A network topology of your configuration would be very helpful. Does the lan interface works? Is the vlan L3 configured on the FGT or elsewhere?

howardsinc

New Member

Hey Sceda,

Could you run the below debugs in the Fortigates CLI while trying to ping 8.8.8.8?

diag debug reset diag debug enable diag debug flow show console enable diag debug flow filter addr 192.168.5.x diag debug flow trace start 200

and when finsihed run: diag debug disable

Regards,

scedaAuthor

New Member

Hi,

thank You for answers. Please see attached lan configuration. WAN IP is not real. When I connect to WiFi LUF GUEST1 I can ping 192.168.5.2 but not 192.168.5.1. I can't ping 8.8.8.8 - so I don't think that is DNS problems.

Today I will do diag on router.

Regards,

Bart.

lan topology.jpg

Sign up

Login with SSO

Login to the community

Login with SSO