Hi, I'm facing a problem that I have a Windows host which connects to
the Fortinet VPN gateway and this host has Internet over VPN and etc.
works great. However now I want this VPN connection "share" with other
device , so I choose Network Adapter se...
Hi, Here is my setup HQ has FG-501E with FortiOS 5.6.5Branch has FG-61E
with FortiOS 5.6.6 So I have two sites, HQ and Branch, I wanted to
extend one of the HQ VLANs (vlan 892) to Branch, actually it works more
or less, but there is a problem in bran...
Hi, I wanted to apply set match-vip enable to policy and it turns out
FortiOS doesn't have such a command ! When it was removed, and how can I
now accomplish hair-pin NAT ? This is what I get in cli: # set match-vip
enable command parse error before ...
Hi, On any recipies I can see that when hair-pinning (NAT reflection,
U-turn NAT) is needed the Virtual IP interface must be set to ANY. Is it
only option ? Or is it possible to set up hair-pinning when Virtual IP
has interface set to WAN ? Also is i...
Hi, I'm relatively new to FortiGate, my background is Cisco ASA, but I
got convinced to FortiNet by my friend and we bought a pair of FG-501E
as our main firewall. Ok,so I have a active-standby cluster. FortiOS
ver. is 5.6.5 I created VDOM for my mai...
Thanks I will try to do that. Question aside, can the vxlan-interface
bridge has IP assigned ? Because currently for computers on that VLAN
the HQ (172.16.92.1) is default gateway, and I would rather want them go
through my wan1. So I was thinking to...
OK so I did it, yes I needed remove policy and then I was able to change
interface. However the U-turn NAT doesn't work. Virtual IP is a standard
static NAT. Then I have Policy which allow specific geoIPs access this
service from outside. Note the 17...
OKThis topic can be closed. I connected a server to FW and actually ping
worked from server. So the conclusion is that means that is not possible
to test from firewall internal interfaces IPs.
You are leaving our website
You are leaving our site and we cannot be held responsible for the content of external websites