FortiOS 6 – IPv6 IPsec VPNs
IPv6 IPsec VPNs This chapter describes how to configure your FortiGate unit’s IPv6 IPsec VPN functionality. By default IPv6 configurations to not appear on the Web-based Manager. You need to enable the...
View ArticleFortiOS 6 – L2TP and IPsec (Microsoft VPN)
L2TP and IPsec (Microsoft VPN) This section describes how to set up a VPN that is compatible with the Microsoft Windows native VPN, which is Layer 2 Tunneling Protocol (L2TP) with IPsec encryption. The...
View ArticleGRE over IPsec (Cisco VPN)
GRE over IPsec (Cisco VPN) This section describes how to configure a FortiGate VPN that is compatible with Cisco-style VPNs that use GRE in an IPsec tunnel. The following topics are included in this...
View ArticleProtecting OSPF with IPsec
Protecting OSPF with IPsec For enhanced security, OSPF dynamic routing can be carried over IPsec VPN links. The following topics are included in this section: Configuration overview This chapter shows...
View ArticleRedundant OSPF routing over IPsec
Redundant OSPF routing over IPsec This example sets up redundant secure communication between two remote networks using an Open Shortest Path First (OSPF) VPN connection. In this example, the HQ...
View ArticleOSPF over dynamic IPsec
OSPF over dynamic IPsec The following example shows how to create a dynamic IPsec VPN tunnel that allows OSPF. Configuring IPsec on FortiGate 1 Go to Dashboard and enter the CLI Console widget Create...
View ArticleBGP over dynamic IPsec
BGP over dynamic IPsec The following example shows how to create a dynamic IPsec VPN tunnel that allows BGP. Configuring IPsec on FortiGate 1 Go to Policy & Objects > Addresses and select create...
View ArticleIPsec Auto-Discovery VPN (ADVPN)
IPsec Auto-Discovery VPN (ADVPN) Consider a company that wants to provide direct secure (IPsec) connections between all of its offices in New York, Chicago, Greenwich, London, Paris, Frankfurt, Tokyo,...
View ArticleLogging and monitoring
Logging and monitoring This section provides some general logging and monitoring procedures for VPNs. The following topics are included in this section: Monitoring VPN connections VPN event logs...
View ArticleTroubleshooting IPSEC
Troubleshooting This section contains tips to help you with some common challenges of IPsec VPNs. A VPN connection has multiple stages that can be confirmed to ensure the connection is working...
View ArticleLogging violations of the MAC address learning limit (480808)
Logging violations of the MAC address learning limit (480808) If you set a maximum number of MAC addresses learned for an interface or VLAN, the managed FortiSwitch unit drops all traffic for...
View ArticleTesting 802.1x authentication with monitor mode (480807)
Testing 802.1x authentication with monitor mode (480807) Use the monitor mode to test your system configuration for 802.1x authentication. You can use monitor mode to test port-based authentication,...
View ArticleFortiLink mode supported over a layer-3 network
FortiLink mode supported over a layer-3 network (457103) This feature allows FortiSwitch islands (FSIs) to operate in FortiLink mode over a layer-3 network, even though they are not directly connected...
View ArticleLimiting the number of parallel process for FortiSwitch configuration (457103)
Limiting the number of parallel process for FortiSwitch configuration (457103) Use the following CLI commands to reduce the number of parallel process that the switch controller uses for configuring...
View ArticleCLI changes for FortiLink mode
CLI changes for FortiLink mode (447349, 473773) There are changes to the execute switch-controller get-physical-connection, execute switch-controller get-conn-status, and diagnose switch-controller...
View ArticleUpgrade the firmware on multiple FortiSwitch units at the same time using the...
Upgrade the firmware on multiple FortiSwitch units at the same time using the GUI (462553) To upgrade the firmware on multiple FortiSwitch units at the same time: Go to WiFi & Switch Controller>...
View ArticleConnecting FortiLink ports
Connecting FortiLink ports This section contains information about the FortiSwitch and FortiGate ports that you connect to establish a FortiLink connection. In FortiSwitchOS 3.3.0 and later releases,...
View ArticleFortiLink configuration using the FortiGate GUI
FortiLink configuration using the FortiGate GUI You can configure FortiLink using the FortiGate GUI or CLI. Fortinet recommends using the GUI because the CLI procedures are more complex (and therefore...
View ArticleFortiLink configuration using the FortiGate CLI
FortiLink configuration using the FortiGate CLI This section describes how to configure FortiLink using the FortiGate CLI. Fortinet recommends using the FortiGate GUI because the CLI procedures are...
View ArticleNetwork topologies for managed FortiSwitch units
Network topologies for managed FortiSwitch units The FortiGate unit requires only one active FortiLink to manage all of the subtending FortiSwitch units (called stacking). You can configure the...
View Article