Description
In FortiGate broadcast traffic is handled by multicast policy instead of normal firewall policy.
Solution
By default there is only multicast address in 'config firewall multicast-address', to allow broadcast to pass through the FortiGate you need to configure broadcast address and apply it into multicast-policy.
config firewall multicast-address
edit "all"
set start-ip 224.0.0.0
set end-ip 239.255.255.255
next
end
Configuration:
1. Configure broadcast forwarding on interface:
config system interface
edit internal
set broadcast-forward enable
next
edit wan1
set broadcast-forward enable
end
2. Configure broadcast address:
config firewall multicast-address
edit "allbroadcast"
set type broadcastmask
set subnet 255.255.255.255 255.255.255.255
end
3. Configure multicast policy:
config firewall multicast-policy
edit 1
set srcintf "any"
set dstintf "any"
set srcaddr "all"
set dstaddr "allbroadcast"
next
end
