Technical Tip: End users' Internet fails, when NBN ISP is dropping Priority Tagged traffic, while FortiGate can access the internet over PPoE

[sahmed_FTNT]

This article describes when end users' Internet fails, NBN ISP is dropping Priority Tagged traffic, while FortiGate can access the internet over PPoE.

Description

 -  Internet is accessible through PPoE trunk link.

-   FortiGate can ping or access internet.

-   End users cannot access internet.

-   Ping from FortiGate (Working): Priority - Best Effort (0).

Ping from Server (not working).

Solution

# config firewall policy
    edit <ID>
        set vlan-cos-fwd 0
        set vlan-cos-rev 0
    end