Skip to main content
webmasterloiza
New Member
February 6, 2018
Question

VLAN on WAN not routing traffic

Our ISP setup our Internet/Data connection via BGP.

 

In each location, we have a ZHONE EAD and a Fortigate 30D.

 

The connection problem is policy, I suspect.

 

Current policy config allows to ping to and from VLAN's, but only lan have access to internet. I cannot access from one VLAN (~~~Net) to the web.

 

Static route is correctly configured.

 

 

 

1 reply

Toshi_Esumi
SuperUser
SuperUser
June 12, 2018

If ~~~Net is the interface the default route is pointing toward, no policy is involved to get to the internet from the IP on ~~~Net interface. I would ask your ISP if the interconnect subnet between ISP's router and the 30D, 192.168.252.x/30, should have route to the internet in their network. They might be expecting your 30D to advertise it if the ISP's router on prem is not the BGP neighbor you configured on the 30D.

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT