Hello, I have a question concerning OSPF with access-list and
route-map.It has to filter permit 192.168.0.0/16 and deny any. When
using an access-list, it works. When using a route-map it doesn't.Here
is part of the configuration: FGT (ospf) # showco...
Hello,I'm running into one issue concerning a laptop connecting with SSL
VPN to a FortiGate.The setup makes use of OSPF routing. The default
routing for all traffic goes thru FG-A.FortiGate FG-B is the entry point
for SSL VPN.Since all traffic has a ...
Hello,I run into issues with a "simple" policy.Here some screenshots to
explain the problem. One policy 16 that allows all from "dial-up" to
"root-vpn0". Counters going up: Policy lookup failed for one I am sure
that one should match the above one ID...
Even with policy routes, you have to know the source IP address. Which
are dynamically IP addresses of different providers.I found a possibilty
under:config vpn ssl settings set auto-tunnel-static-route enableBut
that does not work (yet).
Found the problem. An upstream FortiGate had a static
route.Troubleshooting this issue, I used "Policy Lookup" on a downstream
FortiGate, the FortiGate where I worked on. This one finally didn't had
an issue. But, why didn't the Policy Lookup work. H...