I believe this was an issue with older versions of FortiOS previously.
When going to Authentication -> User Management -> User Groups, I hit
create and target my remote LDAP (Windows AD), and try to specify the
LDAP filter. The filter returns nothing...
I'm building a proof of concept to get more understanding around ADVPN
and BGP before a future project. I have 3x 100E each with its own
internet connection. I've looked a numerous cookbooks, guides and topics
on it. I've managed to configure and bui...
Looks like it stripped my group from the RADIUS connection to the
FortiGate when I made the Remote User Sync Rule. I've re-added it, but
now having issues with FTM push, so gotta test that.
I did end up making a Remote User Sync Rule, but it seems to be bugged.
It has synced my account to the group I created and I got the
auto-provision token, but I get the following message in the logs when I
try to login:Windows AD user authentication...
Test to see if you can ping between the tunnel interfaces
(192.168.168.x). My issue was that while the tunnel connected, only the
first connected tunnel could actually communicate over it, the other
tunnel wouldn't allow anything. The fix was to:conf...
The fix was to enable net-device on phase1 interface of the hub.
Apparently we could also use tunnel-search nexthop, though I've not
tested it, but it's supposed to direct traffic based on the next hop
from routing protocols such as BGP. It can be se...