Hi all, I've a doubt. I'm readying on how the IP pool with overload
option should works. Documentation says that it should perform port
translation but as I see from my logs the source port and the translated
source port are always the same. The IP p...
Hi all, I have setup a new Fortigate 1101E cluster with FortiOS 6.2.10.
Now I'm trying to configure radius authentication for administrators but
when I try to set as source-ip the IP of the MGMT interface I get this
error: x.x.x.x is not valid source...
Hi all, I'm wondering if there's a way to handle multiple dial-up client
with the same local subnet. I have a VDOM that act as a HUB and many
spokes connected through Dial-Up connection with XAUTH authentication.
From the tests I made the fact to hav...
Hi All, we implemented a Dial-Up VPN solution with the following
properties: - IkeV1 Aggressive Mode, since the clients are connection
from unknown peers- XAUTH with external radius It seems now that
Aggressive Mode is not compliant with PCI, so we n...
Hi all, I know that auto key keep alive is usefull to keep the VPN
phase2 UP. My doubt is if this parameter must be enabled on both sides
or it is enough to set it up only on one of the two peer. Another
question regard VPN Uptime under the Monitor I...
Hi Roman, we tried set inbandwidth and outbandwidth on the tunnel
interface (we are using version 5.4.1) but it doesnt'work. Below the
commands: set indbandwidth 128Kbpsset outdbandwidth 128Kbps Trying with
iperf the bandwidth is not limited