Hi all,
we are trying to use the split tunneling configuration for FortiAPs in non-directectly connected VLANs to Fortigate. This APs are configured in a tunnel configuration (captive portal required) but it would be interesting to split the traffic, as said in the 5.6 configuration guide, to avoid loading the fortigate with unnecessary traffic to Internet. But... there seems to be no way to do so, since the networks to avoid the tunnel (being directly routed through the AP), must be declared wether in FortiAP Profile or AP, and it is not possible to do so for all Internet addresses.
So the question is: is it possible to declare which networks should be tunneled to the Fortigate, instead of the locally routed from the AP? Is there a possible configuration for routing locally all Internet but tunnelling to fortigate some IP networks/ranges?
Best regards
Ivan
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
ivan.bermejo@es.logicalis.com wrote:So the question is: is it possible to declare which networks should be tunneled to the Fortigate, instead of the locally routed from the AP? Is there a possible configuration for routing locally all Internet but tunnelling to fortigate some IP networks/ranges?
Check this out https://forum.fortinet.com/tm.aspx?m=154038
Please post your complete config and we will check it out and get back to you.
Thanks,
Lei
wanglei@fortinet.com wrote:Please post your complete config and we will check it out and get back to you.
Thanks,
Lei
Replied here https://forum.fortinet.com/tm.aspx?m=154038
Yes its supported on latest 5.6.3 builds.. as per what i understand the Tunnel ACL can be done in two ways..
set split-tunneling-acl-path ? tunnel Split tunneling ACL list traffic will be tunnel. local Split tunneling ACL list traffic will be local NATed.
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1688 | |
1087 | |
752 | |
446 | |
227 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.