VPN_and_Geography_routing

TigerEmperor · ‎11-19-2018

Dear All Good Afternoon. May I know if 60D FW 6.0.3 support VPN with Geography routing? (eg. Add a address list to Geography Japan, add a static routing to the Japan fortigate wihen the user is acc...

Dear All Good Afternoon. May I know if 60D FW 6.0.3 support VPN with Geography routing? (eg. Add a address list to Geography Japan, add a static routing to the Japan fortigate wihen the user is access the Japan website.)

TigerEmperor · ‎01-06-2018

Thanks Lei & Sidewaysguy Good Afternoon. Finally I stay the wifi in tunnel mode and input below in command line. After REBOOT the 60D (must reboot after setting "set vlanid 123"), it return the cor...

Thanks Lei & Sidewaysguy Good Afternoon. Finally I stay the wifi in tunnel mode and input below in command line. After REBOOT the 60D (must reboot after setting "set vlanid 123"), it return the correct IP (192.168.123.X). I wonder it can not setting in the GUI mode and not display in manual or guide clearly. edit "Wifi_TE_IP" set vlanid 123 end One more thanks for Sidewaysguy and Lei.

TigerEmperor · ‎01-02-2018

Dear Sidewaysguy Good Morning. Thanks for your reply. I see the default FortiAP profile is assigned to Local Wifi Radio Platform. If I create a new profile, I can not see bridge mode in Platform. ...

Dear Sidewaysguy Good Morning. Thanks for your reply. I see the default FortiAP profile is assigned to Local Wifi Radio Platform. If I create a new profile, I can not see bridge mode in Platform. Don't the FortiAP profile is used to map to other Fortigate's AP?

TigerEmperor · ‎01-02-2018

Dear Sidewaysguy Good Afternoon. I add a bridge SSID again. Where can I assigned it in the local wifi? Thanks.

TigerEmperor · ‎12-29-2017

Hi Sidewaysguy. Sorry, I Misunderstand your answer before. I try to add a bridge wifi, add the vlan 123 in the option, but I can not search the wifi on mobile, also I can not see enable broadcase l...

Hi Sidewaysguy. Sorry, I Misunderstand your answer before. I try to add a bridge wifi, add the vlan 123 in the option, but I can not search the wifi on mobile, also I can not see enable broadcase like tunnel mode, do the bridge mode only use to enable the wifi? Yes, It can use if it is used as independent subnet, but the other branch need to limited the subnet in VPN. the vlan 123 is a one of internal network with wifi and phycal cable lan port. Sorry need to use in vlan. I confirmed the other branch is using the tunnel mode but can use the vlan IP, but they do not provided the config to me. What other prossible setting can make a tunnel mode ssid in vlan?

TigerEmperor · ‎12-28-2017

Thanks Sidewaysguy. No. I am not using the external AP, I am using the internal AP Feature. Software Switch=lan Role=lan Vlan Interface=Vlan123 Wifi=tunnel mode (Builtin in Fortigate) Wif...

Thanks Sidewaysguy. No. I am not using the external AP, I am using the internal AP Feature. Software Switch=lan Role=lan Vlan Interface=Vlan123 Wifi=tunnel mode (Builtin in Fortigate) Wifi attached interface=lan My software switch IP (192.168.10.28), DHCP=192.168.10.51-192.168.10.100 My Vlan interface IP (192.168.123.28), DHCP=192.168.123.51-192.168.123.100 The connected device (example: iphone) get the IP 192.168.10.51, but I want it get 192.168.123.51. How can I set it? I can not find the vlan option in wifi. Thanks.

TigerEmperor · ‎12-25-2017

Hi Sidwaysguy Good Morning. I have search google before and find the about doc, it seem a external ap with controller I want the vlan assign to local device SSID, I see it in a company, but I can not ...

Hi Sidwaysguy Good Morning. I have search google before and find the about doc, it seem a external ap with controller I want the vlan assign to local device SSID, I see it in a company, but I can not set it myself. I used to guess it is a problem of tunnel mode or brigh mode but seem not.

TigerEmperor · ‎12-23-2017

Do this forum has Fortigate official technical to answer or no one use Fortigate any more now?

TigerEmperor · ‎12-19-2017

Anyone know how can I set it to use the vlan for wifi? I open a software switch named lan, and create a vlan in this software switch, then put the wifi into this software switch. The wifi got the IP ...

Anyone know how can I set it to use the vlan for wifi? I open a software switch named lan, and create a vlan in this software switch, then put the wifi into this software switch. The wifi got the IP of software switch only not the vlan.

TigerEmperor · ‎12-17-2017

Hello. Both fireware is v5.6.2 build1486 (GA), the FGT is in the route of subnet, do I add a duplicate route to it? (If yes, I have try and seem can not connect---add the peer FGT B address in rout...

Hello. Both fireware is v5.6.2 build1486 (GA), the FGT is in the route of subnet, do I add a duplicate route to it? (If yes, I have try and seem can not connect---add the peer FGT B address in route in the FGT A that has AD) For Second question, I am not talking about FGT A second goto the FGT B second, I want FGT A(Hong Kong) PC access China website (Not internal) via VPN, FGT B(China) PC access to Hong Kong website (Not internal) via VPN.

TigerEmperor · ‎12-17-2017

Sorry, I just login back the fortigate. I can not see the vlan option in the wifi.

TigerEmperor · ‎11-11-2017

Dear all I have a fortiwifi 60d, I form a sofware switch and add a vlan into this software switch, however I notice that when I bind the Wi-Fi into this software switch, it will not use the vlan, how ...

Dear all I have a fortiwifi 60d, I form a sofware switch and add a vlan into this software switch, however I notice that when I bind the Wi-Fi into this software switch, it will not use the vlan, how can I turn it into the vlan, thanks.

TigerEmperor · ‎11-05-2017

Dear All Good Afternoon. I have two fortigate 60D, one in HK and one in China, Only HK have AD and Radius server, I form a site to site vpn between this two fortigate and want both of them can con...

Dear All Good Afternoon. I have two fortigate 60D, one in HK and one in China, Only HK have AD and Radius server, I form a site to site vpn between this two fortigate and want both of them can connect the AD to get the ldap and radius data, however, I notice that I can not access the AD and radius in the fortigate but the subnet behind it can do. How can I let the Fortigate can access the ad server via VPN itself? Thanks. One more thing, I want the CN users can access the HK website auto go through HK fortigate by VPN. HK users can access the CN website auto go through CN fortigate by VPN. Do fortigate have some pool to let me set the policy to do it ? Thanks.

TigerEmperor's Posts

VPN_and_Geography_routing

Re: FortiWifi60d

Re: FortiWifi60d

Re: FortiWifi60d

Re: FortiWifi60d

Re: FortiWifi60d

Re: FortiWifi60d

Re: FortiWifi60d

Re: FortiWifi60d

Re: Fortigate-SiteToSite_VPN-Problem

Re: FortiWifi60d

FortiWifi60d

Fortigate-SiteToSite_VPN-Problem