FortiGate Dialup IPSec VPN取代SSLVPN
由於Fortnet在新版本中已經開始對Desktop Firewall移除SSLVPN, 而Fortinet建議改用ZTNA, 但是ZTNA還需要一個EMS Server, 對於小公司來說就太覆習了, 所以就測試改用Dialup IPSec VPN 這個Lab是以IKEv1測試的, IKEv2暫時測...
FortiGate SDWan for IPSec Tunnel (BGP)
https://www.stupid.hk/wordpress/?p=2694 這篇文章把Static Route改成BGP 先改一下HQ 改其中一個Branch 把原先的Static Routes Disabled了 兩邊都設好BGP就已經Established Learn到BGP route &...
FortiGate SDWan for IPSec Tunnel (Static Route)
https://www.stupid.hk/wordpress/?p=2658 首先要先設定好基本Network, Desktop1經過Internet已經可以ping通3.3.3.3和4.4.4.4 然後建立Site to Site Tunnel(HQ WAN1 to DC WAN1) 建立Sit...
FortiGate SDWan for Internet
這個Lab的Port1 for MGMT管理用, 這裏只需要設定ISP1, HQ, Desktop1 先設定Internet, 以Cisco Router當作Internet host ISP1 int e0/0 ip add 1.1.1.9 255.255.255.0 no shut int e0...
Posted inFortigate
Fortigate SSL VPN
FortiOS 6.2 VPN -> SSL-VPN Portals -> Create New VPN -> SSL-VPN Settings User & Device -> User Definition -> Create New -> Local...