FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
acvaldez
Staff
Staff
Article Id 413847
Description This article will demonstrate the configuration behavior of SCTP multihoming in FortiGate.
Scope FortiGate.
Solution

Diagram:


SCTP DIAGRAM.png

 

Configuration:

The dummy IP is configured in case of overlapping networks between the SCTP server and the SCTP client side.

 

SCTP DUMMY IP VIP.png

The SCTP client’s initial connection request (INIT) from the client to the server will then be translated to this IP address.

 

SCTP PUBLIC IP .png

 

This ensures that the SNATed IP is preserved in the SCTP IP parameter.

 

SCTP TRANSLATION.png

Packet Capture:

SCTP Client init chunk ingress to the FortiGate.

 

sctp ingress.png

 

SCTP Client init chunk engress to the FortiGate.

 

sctp egress.png