About ellenluo

ellenluo · 06-11-2015

Description"Auto IPSec" works for notifying and pushing IPSec configuration to the branch offices when there is no FortiManager in organization. There are two component for Auto IPSec, one is auto-ipsec gateway, another is auto-ipsec client. The poli...

ellenluo · 01-16-2015

Description In FortiGate broadcast traffic is handled by multicast policy instead of normal firewall policy. Solution By default there is only multicast address in 'config firewall multicast-address', to allow broadcast to pass through the FortiGate ...

ellenluo · 12-26-2014

DescriptionProblem:UDP traffic with source port 0 is dropped by FortiGates using NP6 network processors.For example:1) FortiGate-1240B (NP4 platform) -- traffic is not dropped2) FortiGate-1500D (NP6 platform) -- traffic is dropped ScopeAny NP6-relate...

ellenluo · 12-26-2014

Description This case study illustrates how proxy-arp can be used for dealing with overlapping subnets. In this case study: The workstation obtains an IP from a DHCP server on the remote site IPSec VPN (DHCP-relay is required) After obtaining an IP f...

User Statistics

User Activity

How to use Auto IPSec to push IPSec config to remote FortiGates

Technical Tip: How to configure FortiGate forward broadcast

Why UDP traffic with source port 0 cannot pass through FortiGate-1500D

Technical Tip: Configuring DHCP relay over IPSec VPN with overlapping subnets

Fortinet Training Institute

KCS