Fortinet Community

Adrian_Lewis · 01-27-2017

Does anyone know if it is possible to forward packets between VLANs locally on a FortiSwitch when in FortiLink mode or does traffic passing between subnets always have to be punted up to the FortiGate and back again? Seems like it would be a pretty m...

Adrian_Lewis · 10-21-2014

Hi, AFAIK, you can only set the MAC address of a physical interface to something custom but not that of a VLAN interface. There is a setting called 'set subst enable' and 'set substitute-dst-mac XX:XX:XX:XX:XX:XX' on the 'conf sys int' branch for a V...

Adrian_Lewis · 04-11-2014

Hi all, Just wondering if anyone has a recent version of the FGT90D (with serial console port on the front) that can verify whether or not it supports the creation of a redundant or aggregate pair of ports? The only documentation I can find suggests ...

Adrian_Lewis · 06-12-2008

This surely must be a simple update to existing code. Where specifying a load balancing VIP, you should be able to use a weight of zero so that a server will only ever be used if the health check of a primary (or all others) fails.

Adrian_Lewis · 06-12-2008

Mainly for use with multiple ISP scenarios, I' d like to see the ability for a Fortigate to rewrite content on the fly. My priorities would be simple such as DNS rewrites and SMTP helo greeting rewrites. Simple inbound failover of services hosted beh...

Adrian_Lewis · 11-17-2021

Another alternative would be to have both subnets on the same interface using secondary IP. The suggestion from yashwani is cleaner however and should allow you to use all 8 of the /29 IP addresses as there would be no network or broadcast addresses ...

Adrian_Lewis · 08-12-2021

FYI - EMS doesn't have this client setting in the UI from what I've found but you can add: 1 into the top level for the SSL VPN connection to enable it for that connection (needs the advanced view toggled to show the XML tab in the profile).

Adrian_Lewis · 08-12-2021

Pretty sure this needs FCT 7.0.1 as a prerequisite and the relevant setting for the connection enabled. From my testing so far with FCT 7.0.1 and FGT 6.4.6, that combo will not work either.

Adrian_Lewis · 03-16-2021

In case any else comes across this, I tested this on a FortiGate 60E (SoC3) and the config appears to work. Not tested actual traffic over the link but here's the config:edit "s-tag" set vdom "root" set vlan-protocol 8021ad set device-identification ...

Adrian_Lewis · 03-31-2020

Pavel_Livonec_FTNT wrote:This should change soon. As in you would like it to change soon or you have information that suggests it will be changing soon?

Fortinet Community

User Statistics

User Activity

Fastpath L3 to FortiSwitch?

Set MAC address of a VLAN interface

Redundant/Aggregate Interface on FGT90D?

Simple Failover rather than load balancing for VIPs

Basic content rewrite rules

Re: WAN intreface

Re: SAML external browser

Re: SAML external browser

Re: FortiOS 6.4.0: How to use Q-in-Q vlan interface?

Re: FSSO agent ip exclusion

Re: Several problems high memory and cpu usage blo...

RE: Enable Huawei LTE modem

News & Articles

Security Research

Company

Contact Us