Working through the setup of my FortiWiFi 90D, mostly no issues. During the setup, I did update to the latest 5.2 load this weekend. WAN Connected to my ISP, the Internal hosting DHCP for my wired devices. Issue is with the WiFi. Tried setup in Tunnel mode, get connected, but the WiFi does not route to the internet. Looking at the setup guide, did not see anything I missed in the WiFi setup. Thinking it was due to being on the same subnet as the LAN, I deleted it, created it in a separate Class C, setup DHCP on the WiFi, and then added a route from the WiFi subnet to the WAN IP. Still NADA.
Is there a better guide to setup the WiFi to route to the net with the proper setup? Any suggestions as to what to change or check?
Thanks in advance.
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Please post the routing and policy configuration.
Make sure you have a policy allowing traffic with nat enabled.
If you're using the local radios on the 90D, where did you configured tunnel mode? AFAIK, tunnel mode is designed to carry traffic from a managed FortiAP via CAPWAP, even across remote locations or the Internet.
Local radios should simply have the SSID assigned in the radio profiles, and have policies and routes added as per normal.
You could run a sniff and flow trace, testing a connection to Fortinet.com, and see if the output yields anything useful:
diag sniff packet any "host 66.171.121.44" 4
<attempt a connection, press Ctl+C, then...>
diag debug reset
diag debug enable
diag debug flow show console enable
diag debug flow show function-name enable
diag debug flow filter addr 66.171.121.44
diag debug flow trace start 5000
<attempt a connection, then...>
diag debug flow trace stop
diag debug flow filter clear
diag debug reset
diag debug disable
Regards, Chris McMullan Fortinet Ottawa
At work ATM, so will check tonight. In one of the docs I found for setup of the Wireless, when you created the link, options were Bridge, Tunnel and another. I will delete that area, and try it again. Guide did not explain what each were.
Found a few spots that the guides were light on details. Such as adding a DHCP reservation (Figured that out, so not an issue).
Thanks
Did some searching on Youtube (Google did not find this video when I searched ironically). This video (older version of the OS) gave me the missing piece.
https://www.youtube.com/watch?v=klJh9vFIyVI
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1634 | |
1063 | |
751 | |
443 | |
210 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.