Bridge 2 Networks

[ThePro]

I have a client with a FGT50E (running 5.4.1) & a cheap home/office D-Link router (both with their own ISP and subnet).

Is it possible to bridge both networks so devices from one subnet can view/access the devices on the other subnets? (while keeping both the Forti and the D-Link; I would take the D-Link out, but they don't want to, at least for now).

[MikePruett]

These devices are in the same location?

Does the crummy dlink have the ability to set static routes?

[ThePro]

[style="background-color: #ffffff;"]It does, but only for the WAN interface. I will try to upgrade the firmware to see if it lets me do them on LAN as well (I see screens of this same interface that do both WAN/LAN. I will see if theres a firmware update available for this POS.[/style]

[jesquivel]

Manuel Gonzalez wrote:

[style="background-color: #ffffff;"]It does, but only for the WAN interface. I will try to upgrade the firmware to see if it lets me do them on LAN as well (I see screens of this same interface that do both WAN/LAN. I will see if theres a firmware update available for this POS.[/style]

Good morning/afternoon,

We are trying to do something similar at our company. We have two buildings next to each other and are wanting to bridge them together. I don't know what your circumstances were, but would you mind sharing how you were able to solve your dilemma?

Thanks so much,

Jordan Esquivel

[sw2090]

Well after all: since your two devices are in own subnets you wil either have to do some kind of "mapping" from one to the other. You could do vip on the FGT or create a NAT Policy on it for traffic to the dlink's subnet.

Annother way might be to set up static routing  alas you would need that on both sides (Dlink AND FGT) then. Once you have a route to that subnet you don't need to NAT or VIP anymore.

[rwpatterson]

Just create an IP address on an interface on the FGT that matches the subnet on the DLink and plug that into any LAN port on the DLink. Set up your policies and it is just like any other network.

Additionally, if the DLink subnet folks need resources on the Fortigate, create Virtual IP addresses on the FGT. That should work since they will appear to be on the same segment.