You should be able to configure a tunnel from the same LAN interface
connected to your GWLB. Question is probably better answered with a
clearer picture of your topology and if you want to leverage the GWLB in
the IPSec flow or not?
You can do it but it will be hard to make it a trusted certificate for
all of your clients. It will need SANs or wildcard CN so that each
FortiGate that is presenting it will be verified accordingly. Otherwise
users will get untrusted certificate war...
As mentioned in my reply a week ago, you need a wildcard certificate or
a certificate with multiple SANs. Fortigate will not select individual
certificates for you based on hostname. If you want this functionality
you should use a purpose-built appli...
I understand how vlan 50 traffic passes between 2 switches without
fortinet. But I'm surprised cause the L2 traffic from port1 of the
software switch, goes through port 2 as if it were a mirror port. The
software switch is a switch. It's a two-port s...
