Re: FortiAP Tunnel Mode - FortiSwitch VLAN

KumarV · 11-28-2024

Description This article describes the troubleshooting steps and solution of a scenario where the SAML Login page is stuck in a loop for Wireless users trying to go to a Captive Portal to access the Internet using SAML as an Authentication method wit...

KumarV · 11-24-2024

Description This article explains the troubleshooting steps and solution of unidirectional OSPF packets observed which leads to OSPF neighborship stucks in Init state. Scope FortiGate. Solution FortiGate1 (VPN1)============IPsec Tunnel ============(V...

KumarV · 11-17-2024

Description This article describes how to advertise NATted IP’s into the BGP routing table. This concept is useful when IPSEC VPN has overlapping subnets on both sites and BGP is used as a routing protocol. Scope FortiGate. Solution The following com...

KumarV · 11-01-2024

Description The article explains the behavior change in the FortiGate towards the replies to the ICMP packets originating from the Traceroute. Note: This behavior never impacted the actual traffic flow. This only displays the incorrect Traceroute res...

KumarV · 10-28-2024

Description This article explains the reason for getting the warning 'System file integrity monitor check failed!' when setting up a new FortiGate-VM. Scope FortiGate-VM. Solution It is expected in v7.0.16 and v7.6.1. The minimum Security level for V...

KumarV · 11-10-2024

Hello @Pkay983 You can run the commands mentioned below: #di sniffer packet any "host x.x.x.x and icmp" 4 0 l Initiate a ping from remote site to your Firewall and run the sniffer mentioned above. x.x.x.x = src ip on remote site. You should see tunne...

KumarV · 11-02-2024

Hello @SGLeo 1) You need to have Policy from VLAN 40 to VLAN 20 (users to printers) 2) You can test it by enabling the NAT on the Firewall policy from User to Printers. (Most probably it would work), if it works with the NAT, then your printers have ...

KumarV · 09-14-2024

Hello @Thonno , No, you do not need to add any extra configuration on Fortiswitches. All you need to make sure is that your FortiAP is getting IP from DHCP and if it is connected then all the DHCP discover traffic from clients will be encapsulated un...

KumarV · 09-02-2024

Hello @issatogola, Once you connect the console cable and If your fortigate stucks in boot loop state then you have to press any of the key and then it will show you few options and you have to press "F" to format the device and they you need to foll...

KumarV · 07-31-2024

Hello, As mentioned by you that it connects after few tries, then you can try to increase the remote authentication timer on Fortigate configuration. config system global set remoteauthtimeout 300 end I would suggested you to change it to max for now...

User Statistics

User Activity

Troubleshooting Tip: How to Troubleshoot if SAML Login Page is Stuck in a Loop

Troubleshooting Tip: One-Way OSPF Packets over IPsec Tunnel

Technical Tip: How to Advertise NATted IP’s into BGP

Troubleshooting Tip: The ICMP_TIME_EXCEEDED Packet does not follow the original ICMP path and displays the incorrect traceroute from the User.

Technical Tip: 'System file integrity monitor check failed!' is shown when deploying a new FortiGate-KVM

Re: IPSEC VPN Traffic ping not working

Re: Different VLAN unable to SCAN to PC using SMB