Description This article describes how to verify that the DHCP-leased IP
address has been updated. Scope FortiGate. Solution When the FortiGate
interface mode is configured as DHCP, the interface will be the DHCP
client, and after reaching the DHCP l...
Description This article describes when logs with 'logid="0100044547"'
and 'logid="0100044546"' are generated and how to verify the logs for
configuration changes down in the FortiGate device. Scope FortiGate.
Solution FortiGate will generate two kin...
Description This article explains the working of the DPD mechanism set
to 'on-demand'. Scope FortiGate. Solution When DPD is set to on-demand,
this will notify FortiGate to send DPD message to check the liveliness
of the remote VPN peer only when the...
Description This article describes the configuration to restrict the
admin user to one active session at a time. Scope FortiGate. Solution
Log in to the device with the super-admin privilege admin account and go
to settings.Search 'Allow concurrent s...
Description This article explains the scenario in which phase 2 of
site-to-site VPN between FortiGate tunnels goes down and will not
automatically come up. Scope FortiGate. Solution This behavior is
expected when phase 2 'auto-negotiate' is kept disa...
yes, you could achieve it. Make sure to add dailup tunnel subnet in
phase2 selector of the site-site tunnel. in FGT1 source :10.5.41.0/24
dest :192.168.8.0/24in FGT2 source 192.168.8.0 dest :10.5.41.0/24 In
FGT2, add a routeto 10.5.41.0 via tunnel in...
Hi Imel, I believe, you need to create ip pools for each nat ip address.
Later call the same in specific soucre and destination policy. Please
refer to
https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-configure-SNAT-with-IP-pool/ta-p/...
hi, the script is correct. You can also follow alert mail for concerve
mode and logs collection
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Automation-stitch-for-the-conserve-mode/ta-p/240696#:~:text=FortiGate%20by%20default%20turns%20o...
hi Abel,Please make sure you have spit tunnel enable in the sslvpn so
you that only remote subnet are pointing todards sslvpn adaptor in local
pc. Better to check routing-table in the pc before and after connecting
to sslvpn. use "route print" if its...
Hi, Please try the solution provided in
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Error-The-VPN-server-may-be-unreachable-14-for/ta-p/190882
