Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
dulrich
New Contributor

FortiSwitch for remote access (as FortiAp) ?

Hi,

 

We have a remote office which is connected by a normal internet access. Before we go to Fortigate, we had Checkpoint Appliance and the remote office was connected through an UTM-1 Edge (hardware VPN or some sort of).

 

By what can we replace this UTM-1 Edge ? Actually we have done a VPN Software but it's not a good solution.

We want all the traffic from the remote office go to our main office, we don't want to split traffic at the remote office (like internet vs intranet). We have on the remote office only 4 PC and a printer.

I think FortiAp could be a solution, but we don't want any Wifi !

So a FortiSwitch can do the same or not ?

Or should we go to another smaller Fortigate ? => I think to expensive and more complex to manage

 

Thanks in advance

3 REPLIES 3
Alby23
Contributor II

FortiSwitch does not use CAPWAP tunnel as FortiAP in tunnel mode does.

Carl_Wallmark

You can try a smaller FG and test the VXLAN feature.

 

Basically it will create a L2 tunnel to your office, you will be on the same network as the rest of your bigger office.

 

There are two ways this can be done, over VPN tunnel or native (in fortios 5.6)

 

http://kb.fortinet.com/kb....do?externalID=FD40170

FCNSA, FCNSP
---
FortiGate 200A/B, 224B, 110C, 100A/D, 80C/CM/Voice, 60B/C/CX/D, 50B, 40C, 30B
FortiAnalyzer 100B, 100C
FortiMail 100,100C
FortiManager VM
FortiAuthenticator VM
FortiToken
FortiAP 220B/221B, 11C

FCNSA, FCNSP---FortiGate 200A/B, 224B, 110C, 100A/D, 80C/CM/Voice, 60B/C/CX/D, 50B, 40C, 30BFortiAnalyzer 100B, 100CFortiMail 100,100CFortiManager VMFortiAuthenticator VMFortiTokenFortiAP 220B/221B, 11C
MikePruett

Yeah, buy a baby Gate that is able to do VXLAN and profit for now

Mike Pruett Fortinet GURU | Fortinet Training Videos
Labels
Top Kudoed Authors