About rbarnes

rbarnes · 09-04-2024

Description This article describes the scenario where an IPsec VPN is built to a third-party firewall or VPN appliance and the phase2 is failing. The issue is caused by the spi keys that are not read in the same order by the third-party device. This ...

rbarnes · 09-02-2024

Description This article describes how to troubleshoot policy routes. Scope FortiGate. Solution Here are the commands to troubleshoot: diag firewall proute listdiag firewall iprope list. Get router info kernel.get router info routing-table all diag d...

rbarnes · 08-23-2024

Description This article describes a scenario when the QSFP is connected properly but the port is showing down. Scope FortiOS 7.2. Solution The Firmware version is 7.2.8. Verify if the port is up with the following commands. diag hardware device info...

rbarnes · 07-27-2024

Description This article describes the case when using a VIP, the scan of the VIP external address with nmap shows that many ports are open. Scope FortiGate 7.0, 7.2, and 7.6. Solution Example VIP configuration: config firewall vip edit "test-vip" se...

rbarnes · 05-20-2024

Description This article describes how to source an external resource (also known as a threat feed connector). Scope Fortios 7.0,7.2.7.4 Solution It is not possible to source an external resource through the local VDOM. It can only be sourced from th...

User Statistics

User Activity

Troubleshooting Tip: IPsec dialup or site to site to a third-party firewall or VPN appliance

Troubleshooting Tip: Policy routing

Troubleshooting Tip: QSFP port is not showing up

Troubleshooting Tip: FortiGate shows many ports open when nmap scanned with a VIP is configured

Technical Tip: External resource with Virtual Domains

KCS

Fortinet Training Institute