Fortigate Firewall Integrate with CISCO Switch

We will use fortigate firewall integrate with cisco core switch for inter vlan routing configuration.
Also DHCP Relay to assign IP address for each VLAN to access the Internet.
Here is the video about previous LAB • How to Configure DHCP ...
Here is another video related to Networking
How to configure VPN site to site on Cisco Router • How to configure VPN s...
How to add Fortigate and Mikrotik firewall for GNS3 • How to add Fortigate a...
How to add cisco switch layer3 and cisco ASA for GNS3 • How to add cisco switc...
How to configure ASA firewall step by step • How to configure ASA f...
How to Configure DHCP Relay on CISCO Switch Layer 3 • How to Configure DHCP ...
Fortigate SD WAN link monitor • fortigate SD WAN link ...
Fortigate firewall SD-WAN setup • Fortigate Firewall SD WAN
Fortigate firewall basic configuration • Fortigate Firewall bas...
How to configure port security on CISCO Switch • How to configure port ...
What is Management VLAN on CISCO Switch • What is Management VLA...
How to configure inter VLAN routing VTP and DHCP Server on Cisco Switch Layer3 • How to configure inter...
How to configure inter VLAN routing and DHCP server on cisco router • How to configure inter...
How to configure WAN failover on cisco router • How to configure WAN f...
How to configure Access List SSH Remote in Cisco Router • How to configure Acces...
Here you can download directly from my file for GNS3 resources needed.
Windows OS image drive.google.c...
CISCO Images : drive.google.c...
GNS3 for Windows : drive.google.c...
Firewall_Router : drive.google.c...
VMware WorkStation 12 : drive.google.c...
FortiGate mid-range next-generation firewalls (NGFWs) provide high performance, multi-layered advanced security, and better visibility to protect against cyber-attacks while reducing complexity.
FortiGate firewalls are purpose-built with security processers to enable the industry’s best threat protection and performance for SSL-encrypted traffic.
VLAN: Virtual Local Area Network reduce the broadcast domain and separate the LAN into different subnet.
VLANs can be used to partition a local network into several distinctive segments, for instance:
-Production
-Server Farm
-Voice over IP
-Network management
-Storage area network (SAN)
-Guest Internet access
-Demilitarized zone (DMZ)
DHCP Server: provide IP address to the client for each VLAN.
A DHCP Server is a network server that automatically provides and assigns IP addresses, default gateways and other network parameters to client devices.
It relies on the standard protocol known as Dynamic Host Configuration Protocol or DHCP to respond to broadcast queries by clients.
If you like my video please like, comment, subscribe #TanKirivann and turn on notification for more videos.

[@tankirivann]

@Neven Pešut can you ping its default gateway from PC1 : 192.168.10.1 ? if can't ping you need to check on your DHCP Server, I hope you can get my point. thanks for your question

[@technicaltips600]

Kindly make a video on same topology u shown in this video how to configure ipsec with sd wan

[@tankirivann]

Hi bro thank you for your request, maybe this video can help you. how to configure sdwan rule advpn on fortigate firewall kzbin.info/www/bejne/Z6Kbl6ycZ6-oZqs

[@thedeafministry]

easily the most helpful vids I've found in the last few months

[@tankirivann]

Hi bro, thank you very much🙏🙏🙏

[@aftabishtiaq6445]

hello sir, can you please show me the detailed video how to set up the GNS 3 with all this equipment and from to get all the images

[@tankirivann]

Hi bro I in my videos already for images you can find in my videos description pls check here How to setup GNS3 and add FortiGate to LAB kzbin.info/www/bejne/fouQnniag7yGiNk

[@mikendala6722]

Watched in July ,2021,,what a post, so informative and valuable. Keep posting more TAN.

[@tankirivann]

Thank you for watching my video, yes I will share all my experience and knowledge here. if you have any ideas pls share to the world.

[@tankirivann]

Thank you all for watching my VDO, I will update more VDO as soon as possible, a bit delay due to personal BC at work.

[@technicaltips600]

Kindly make a video on SD WAN and IPsec use this topology I have seen the video u recommended in previous comment but but I can't understand just hint me I will be very thankful to u

[@user-yb1gq1sb3y]

Really Really HelpFul. Thank you Brother. From Thailand.

[@tankirivann]

Thank you very much bro for your comment. I am from Cambodia 🇰🇭 we are close to each other. I hope you doing well and good luck 😍🙏🏻

[@ivanriqueros12]

thanks man !!! u the g.o.at !!

[@tankirivann]

Hi bro, thank you so much, god bless you 😊🙏🏻

[@provedorinternet8604]

congratulations!, this video helps me very much. I desire success your channel

[@tankirivann]

Thank you very much bro🙏💖

[@trieutruong2410]

Hi Tan, thanks for your sharing, it's pretty nice with designing. I would like to contribute some construction idea for the lab. Honestly, new firewall from 100F onwards, it could handle traffic of whole 500 devices without any issue. My POV, we could make the new proxy server and let all traffic go through it and manage all the filter on this proxy. We only need to create the firewall policy to allow all traffic from proxy server to internet. Otherwise, Fortinet can acts as VLAN management along with inter-vlan routing. DHCP Relay from my personal experience does not good as we thought when AD/DNS/DHCP can be affected due to combination. The connection from Firewall to Core-switch could establish as trunk, and we only need to set the SVI IP for management.

[@tankirivann]

Hi bro thank you very for your good sharing here, I hope you doing well. different company have different network design base on the ICT Infrastructure.

[@marcelostriglio9697]

amazing video! how can i publish a server, for example, from internet to pc in vlan 10 ? do the layer 3 router permit pass traffic inside the network if i publish something in my fortinet ?

[@tankirivann]

Hi bro thank you for your questions. Yes fortigate is firewall that allows and blocks all traffic incoming/outgoing in our LAN. You can create policies in your fortigate base on your network requirements. Different design with different requirements in the company.

[@santhoshsarathy8746]

Thanks a lot for upload this video 👍i am searching lot of finally got this

[@tankirivann]

Hi bro, thank you for watching my video. I see you with my next video

[@yb-pq8ry]

Sir, ur video is helpful. Tq sir

[@tankirivann]

Thank you very much bro 🙏🏻

[@benedictagyemang3862]

Keep it up Bro Tan, this was very informative to me. Thank you.

[@tankirivann]

Thank you very much bro for your support. More interesting topic will release soon

[@mirarbg8412]

love your videos

[@tankirivann]

thank you very much, I love you too😍💖

[@technicaltips600]

If we have sd wan instead of a single wan u described than what will b the configuration

[@tankirivann]

Hi bro thanks for your question, maybe this video you are looking for: vpn sdwan fortigate kzbin.info/www/bejne/opS8mHWKqc2fi5Y

[@srikantm175]

Hi friend, thanks for the video. Earlier I requested for cisco Asa failover process 😁.

[@tankirivann]

Hi my friend thank you for keep in touch. pls wait for the moment with ASA I will try my best ASAP😊

[@worldofentertainment4938]

always love your videos. you are doing the good job.

[@tankirivann]

hi bro, thank you very much for always support. I hope you learn something from my video🙏😊💖

[@shaunsg87]

Thanks. Nicely explained and troubleshooted..

[@tankirivann]

Thank you for watching my vdo, cheers

[@fktech3320]

Dear how to route VPN traffic for specific vlan if I my vlan on core switch

[@tankirivann]

Thank you very bro for your question. Pls check here my previous video kzbin.info/www/bejne/iIHKqZKlqtijnbc you can allow only specific vlan on firewall policy. I hope I answer to your question

[@fktech3320]

@@tankirivann dear thanks to your response i am looking forword more videos on your channel

[@saifemran4528]

Great Video like usual! Thank you!

[@tankirivann]

thank you very much.

[@techsupporths4262]

Wow great..!!!

[@tankirivann]

Hi bro, thank you very much for your support.

[@ctxlearning]

Can request for LACP set up for fort gate and Cisco switch ? Thank man

[@tankirivann]

thank you very much for your request. This topic I already tested but it doesn't work in gns3. anyway I will try to the solution to make it work so I can share to you.

[@ctxlearning]

Do u have any WhatsApp’s contact number c

[@ismt101]

Thanks buddy.

[@tankirivann]

thank you🙏🙏🙏

[@ismt101]

@@tankirivann Bro, i have a question. Can the vlan 17 access internet if i add the policy in the Fortigate?

[@tankirivann]

@@ismt101 yes can, you can allow/block in firewall policy. thank you

[@ismt101]

@@tankirivann thanks.

[@tankirivann]

@@ismt101 😊😍🙏🙏🙏

[@sreedharsuma]

very nice and helpful videos thank bro

[@tankirivann]

Hi bro appreciate your support, wish you all the best😊

[@changechallege983]

that topology work with single device FG, Core Sw If 2 FG with HA, 2 Core Sw that topology is wright, system can work ?

[@tankirivann]

Hi bro thank you so much for your questions, pls check my video here about Fortigate HA configuration kzbin.info/www/bejne/aqXaoXh_frisopI

[@changechallege983]

@@tankirivann thanks for rep, i mean with 2 FG, 2 core SW, with 2 Core SW can not config that because system loop i try it and fail, can you show me how

[@tankirivann]

@@changechallege983 hi bro thank you for your feedback, I will look into it and get back to you ASAP. If it works I make a video lab practice on this topic🙏🏻

[@globalguru24]

I have done everything after watch your video but 192.168.17.1 doesn't get ping from vlan 10 pc (PC1). Every Vlan getting ping replay each others. For Example Vlan 10 to vlan 30, Vlan 30 to vlan 10 and Vlan 20 to vlan 30 etc. I now want to block VLAN 20 from accessing VLAN 30. I have Created policy to block VLAN 20 on Fortigate Firewall but It does not work. Can you take my computers any desk id ??

[@tankirivann]

Hi bro sorry for late reply, you need to configure routing b between your firewall and core switch. for blocking traffic in vlan 20 you need to have access control list apply in your core switch. but if you want firewall to manage all your traffic you may follow another video here kzbin.info/www/bejne/hpS5mHWDdrRmi7M

[@davenderkumar4784]

How can i connect 3 WAN with this topology and want to load balancer with all WAN

[@tankirivann]

Hi bro thank you very much for your question and sorry for my late reply. yes you can connect more WAN 3 or 4 or 5 and you need to configure SD-WAN in fortigate firewall with your policy.

[@technicaltips600]

How to configure IPsec with this topology

[@tankirivann]

Hi bro thanks for your questions maybe you can watch this video how to configure sdwan rule advpn on fortigate firewall kzbin.info/www/bejne/Z6Kbl6ycZ6-oZqs

[@worldofentertainment4938]

good work. you are amazing.

[@tankirivann]

Hi bro, thank you very much for your support. stay safe and health🙏🙏🙏

[@truongthanhluong8266]

The video so valuable, thank you

[@tankirivann]

Thank you very much😊

[@sajidshamir]

great work. quick question plz, why you did not assign ip to core L 3 switch 3 port e/3 instead of adding ip to vlan 17 ? or allow as trunk by not assigning ip ?

[@tankirivann]

Thank you very much for your support. also thank your very much for your good question, actually for this LAB am planning to add another firewall using vlan 17 but not fortinet. No worry you can assign IP on L3 if you wish.

[@crepinmefono8726]

Hello bro. Is It easy to use vtp protocol to configure vlan?

[@tankirivann]

hi bro, yes when you have big network infrastructure, so you need to create new vlan on vtp server only. I hope you get my point and if you have any other question pls comment. thank you

[@crepinmefono8726]

It’s will be a great pleasure for me to invite you in Paris and teach me more in network 😀😀 I’m junior system and network administrator 5 years experience 🙂🙂

[@tankirivann]

@@crepinmefono8726 hi bro, you are very welcome. any help I can do remote from my site here in Cambodia😊😍💓

[@fktech3320]

Dear can u make videos on explicit proxy with URL filtering plz this is request I need to deploy our environment. Thanks

[@tankirivann]

Thank you very much bro for your request. I am not sure with trail version we can do it or not, anyway I try my best to make this video for you ASAP.

[@rooneym.4598]

What is the name of the logiciel you use sir ?

[@tankirivann]

Hi bro thank you for watching my video. This lab I use gns3 software for testing, if you need any help pls let me know.

[@tverconline9862]

សួរស្ដីបងសុំសួរបងមួយសំនួរពេលនេះខ្ញុំកំពុងរៀន Cisco CCNA 1-4 តើខ្ញុំគួររៀមេរៀន firewall របស់ Cisco ឬ Fortinateបង អរគុណសំរាប់ការឆ្លើយតប

[@tankirivann]

សួស្តីប្អូនប្រុស បងអរគុណសំរាប់សំនួរដ៏ល្អក៏ដូចជាការគាំទ្រវីដេអូបងផងដែរ។ បងចង់សួរទៅប្អូនវិញថា តើថ្ងៃអនាគតប្អូនចង់ក្លាយជាអ្វី ប្អូនត្រូវមានគោលដៅមួយច្បាស់លាស់ជាមុនសិន។ សំរាប់បងរៀនមួយណាក៏ល្អដែរ ហើយបើជាបទពិសោធន៍ផ្ទាល់បងគ្មាន certified អ្វីទាំងអស់អ្វីៗដែលបងចែករំលែកគឺការងារជាក់ស្តែងនិងការស្រាវជ្រាវបន្ថែម។ បងបានរៀន CCNA1-4 V6, MCSA, VMware Vsphere V6.5 ប៉ុន្តែដូចបានបញ្ចាក់ចឹងបងមិនបានប្រលងយក certified អ្វីទាំងអស់។ សង្ឃឹមថាប្អូនមានជាគន្លឹសក្នុងការរៀនសូត្រអោយចំគោលដៅរបស់ប្អូន ហើយបើសិនជាមានចំងល់អ្វីបន្ថែមយើងនៅតែអាចទាក់ទងគ្នាបាន បងរីករាយជានិច្ច។

[@tverconline9862]

@@tankirivann បាទបងអរគុណនិយាយរួមខ្ញុំចង់ចេះខាង Networking ខ្លះ នឹង Server ខ្លះ ព្រោះឃើញតំរូវការស្រុកយើងពេលធ្វើការគេតំរូវ អោយមានចំណេះដឹងច្រើន។ និយាយរួមខ្ញុំបានរៀនខ្លះៗពី Mikrotik level basic windows Server មួយចំនួនដែរបងតែមិនពេញលេញទេ។ នឹងកំពុងរៀន Cisco បន្ថែមបង។ និយាយរួមចង់រៀនមុខវិជ្ជាដូចដែរបងបានរៀនដែរ។សូមអរគុណបង

[@tankirivann]

@@tverconline9862 បាទអរគុណប្អូនដូចគ្នា បើជាបទពិសោធបងធ្លាប់ជួបក្រុមហ៊ុនធំៗគឺគេប្រើ VMware ចឹងប្អូនគួរសិក្សានិងស្វែងយល់ពីវាបន្តើរៗទៅទើបល្អ។បងជឿជាក់ថា២ឆ្នាំក្រោយប្អូនគឺមានសម្ថភាពគ្រប់គ្រាន់អាចសំរេចគោលដៅរបស់ប្អូនបាន។

[@tverconline9862]

@@tankirivann បាទអរគុណច្រើនណាស់បងដែរបានជួយណែនាំផ្លូវ។តើខ្ញុំគួររៀនបន្ថែម VMware vsphere បន្ថែមត្រូវឬអត់បង❤️

[@tankirivann]

@@tverconline9862 ប្អូនគួរតែរៀនទើបល្អ ព្រោះវាសំខាន់ដែរក្នុងការគ្រប់គ្រងServer

[@zahiaotmani5187]

Thanks for the vidéo but i have Always a probem with my forigate .l can't start it

[@tankirivann]

hi bro thank you for watching my video. could you share more about your problem/error and what is your fortios version?

[@zahiaotmani5187]

@@tankirivann Thank you, I solved the problem, but I have a project related to creating a VPN between 2 Fortigate, i watched your video about it, I followed all steps but the zone inter vlan in 2 FG not working.I can't ping from pcs of vlan1 to another vlan, I use fortigate 7.2.1 and switch iou l2

[@tankirivann]

@@zahiaotmani5187 Thank you for your reply bro. could you check your PC have gateway IP or not? if no gateway we cannot do routing between vlan. I hope I answer to your question with your previous comment.

[@sivan2591]

Thank you somuch🙏

[@tankirivann]

Thank you bro for watchning my VDO

[@redzer20]

Thanks for the video, i am a fan after watching your several videos. i'm trying to copy your network infra however can you send the video on how you setup the L3 devices and configure the VLANS?

[@tankirivann]

Hi bro, appreciate for your support. I already have some lab related to L3 with previous video so you can have a look. if you want to deploy different network infrastructure pls let me know. most of company has its own infrastructure.

[@redzer20]

@@tankirivann i already setup the device same setup as yours and i am now able to connect end devices to the internet. However did you already try SSL VPN config on the fortigate using GNS3? Can you show me how it works? Thank you.

[@tankirivann]

@@redzer20 Hi bro, thank you for your feedback. I think SSL VPN need license, anyway i will try these lab first.

[@usman92ish]

Hello. I am facing a problem. I have Cisco Nexus and it don't have dot1q encapsulation command. By default encapsulation is dot1q on cisco nexus 9k. So i simply give the command switchport mode trunk and my PCs are unable to ping vateway which is virtual interface on gortigate. However switch is pinging all virtual interfaces

[@tankirivann]

Hello my friend, sorry for late reply. can same vlan ping its gateway? do u have vlan created on your switch? please share your configuration if possible so we can figure out the issue together. thank you for watching my video

[@nimesis124]

Hi, why you didn't use VTP server for core switch and VTP client for rest of the switches?

[@tankirivann]

hi bro, thank you for your comment. I have another LAB about this VTP on cisco switch. anyway thank you very much for watching my video and see you next time.

[@penggewang]

thanks for ur idea...

[@tankirivann]

thank you for your support. let me know if u have any good idea so we can learn together

[@tankirivann]

Thank you my friend on your idea about uplink to Core Switch. It is depend on your network design infrastructure. for 3 Tier design (Core, Distribute, Access) we use p2p for Core uplink and do the routing, it is consider as a layer3/router for filter traffic too. if you have any ideas pls share here.

[@donaldkatrin5598]

I received the message that the license has expired. Do you have a new license? Licence for appliance FortiOs

[@tankirivann]

Thank you very much bro for your question. yes trial version have limit time, we need to delete this Firewall and add new one for your lab in gns3. Try to backup your firewall configuration before the license expire so you can have this configuration file restore in new firewall. I hope my answer can help you to practice more on fortigate firewall.

[@donaldkatrin5598]

@@tankirivann thank's bro

[@tankirivann]

@@donaldkatrin5598 you are welcome, I hope to see you with my next videos😊

[@donaldkatrin5598]

@@tankirivann thank's my brother

[@tankirivann]

@@donaldkatrin5598 Thank you and good luck bro🙏😊

[@dineshupadhyay462]

only adding route to VLAN 10 will work ?? or we have to add static route for all the vlans ?

[@tankirivann]

thank you for watching my VDO, yes u need to add all vlan if u want all vlan can access to Internet later. it is depend on your network environment design. pls let me know if u have any other issue so we can learn together.

[@santhoshsarathy8746]

I have one doubt default route done on firewall then why need to create another Vlan static route like Vlan 10 one static route another Vlan 20 static route gateway coreswitch pointed why this?

[@tankirivann]

Hi bro thank you for your question. In this LAB, by default the fire will drop/block the traffic from all VLAN on Core switch so we need to do the routing (static or dynamic) to allow those traffic. anyway it just an example, you can design your own network environment. I hope you get my point if you have any other question pls let me know. thanks

[@santhoshsarathy8746]

@@tankirivann thanks for the reply yes your right I am working real time same configuration done like what your done this video same like,my doubt is all the vlan created static route but gateway coreswitch I will study more thanks

[@tankirivann]

@@santhoshsarathy8746 thank you bro for sharing your idea. actually this LAB is similar to one of my friend network design at his company. pls keep posting if you need any other help, cheers

[@santhoshsarathy8746]

@@tankirivann thanks some of companies followed this setup any way keep it up continue to upload more videos.thanks

[@tankirivann]

@@santhoshsarathy8746 thank you bro for your support. I try my best to upload more topic

[@hanykhalaf6101]

Thanks bro

[@tankirivann]

Hi bro thank you very much for your support.

[@ravikant7005]

Nice video sir

[@tankirivann]

thank you very much for watching my vdo.

[@chamrethpang7040]

Good for sharing brother. Do you have more video that show how to se up VDOM on Fortigate?

[@tankirivann]

Thank you for watching my video, I think you refer to VDOM on Fortigate. To be honest this topic is really interesting and I also have no experience on it, will research more for your request.

[@chamrethpang7040]

@@tankirivann Yes, I mean that one. Thanks you.

[@nimesis124]

Hi bro, Can we make CoreL3 port et0/3 to "no switchport" except making it access port under vlan17, it will work or not? if not then why. Thanks.

[@tankirivann]

hi bro, thank your for sharing these idea. yes correct you can do that. here in my case i use vlan instead of route port. I hope you share more if any, cheers

[@tsukii8139]

Hello sir, what application are you using these exercises?

[@tankirivann]

thank you for your question, we use gns3 software with VMware

[@thimmappathimmappa1131]

Hi sir, Kindly suggest me which application good for practice whether the Cisco Packet tracer or GNS3.

[@tankirivann]

Hi bro thanks for watching, if you are the beginner I recommend Cisco Packet tracer. after that you can use GNS3 for the real LAB. but remember that GNS3 need more hardware resources (CPU, RAM) than Cisco Packet tracer.

[@thimmappathimmappa1131]

@@tankirivann Thank you so much information, and please share the hardware resources must we have.

[@tankirivann]

@@thimmappathimmappa1131 you welcome bro, pls check here with GNS3 site docs.gns3.com/docs/getting-started/installation/windows/

[@fandulan]

Love ❤️❤️ it

[@tankirivann]

Hi bro, thank you very much for your support🙏💖

[@youtubeaccountid489]

I don't get cloud in gns3 how to configure that

[@tankirivann]

Hi bro, thank you very much for your question. cloud is default device in gns3. we no need to configure it.

[@youtubeaccountid489]

@@tankirivann after install fortinet in gns3 console not coming why?

[@tankirivann]

@@youtubeaccountid489 bro do you have putty for console. old version need putty and new version need solar putty, I hope I answer to you question. If you still have an issue maybe you need to reinstall gns3.

[@youtubeaccountid489]

Ya I have but console not coming solar putty

[@tankirivann]

@@youtubeaccountid489 Thank you for your reply. pls try to remove/reinstall your GNS3, thanks.

[@pongytb]

This helpful, but i don't know why my gns3 VM cloud can't connect to internet can you help me brother?

[@tankirivann]

thank you for your support. Pls add 1 more network card for your GNS3 VM and bridge with your local PC

[@pongytb]

@@tankirivann I did, but when i click Ethernet Adapter on cloud to add VMware network adapter i didn't see one adapter (bridge) that i just add to my gns3 vm.

[@tankirivann]

@@pongytb on the cloud it will show e0, e1, e2 for network port. so pls which one is your bridge network port?

[@pongytb]

@@tankirivann no brother, my cloud it show VMware Network Adapter VMnet1 and 8 but it don't show VMnet5 is my bridge adapter. and i already add VMnet5 to my gns3 vm server.

[@pongytb]

@@tankirivann Ohh god!!! now i found the the solution, thanks brother for ur support.

[@darexX44]

Is it possible to just use fortigate as the dhcp server of those vlans instead of dedicating a cisco router for dhcp?

[@tankirivann]

Hi bro thank you for watching my video, yes we can do that pls check in my play list for those video. If u have any other issue pls let me know I hope u get the answer.

[@darexX44]

@@tankirivann Sir really appreciate all your videos. thanks so much. But i couldnt find the same scenario as this one. which you did an SVI on the core switch, but I want to know/understand how to make the Fortigate the dhcp server of dif vlans instead of using cisco router for dhcp.

[@tankirivann]

@@darexX44 Hi bro thank you very much for your feedback, pls check here also include that dhcp server in fortigate kzbin.info/www/bejne/iIHKqZKlqtijnbc I hope it can help you

[@victors8809]

One question: why didnt u set the interface on core switch with the ip addres instead of creating vlan 17 and adding the switchport as mode access?

[@tankirivann]

Thank you very much for your question. In my case here I want to add another firewall on VLAN 17 so if I use IP for route port I can't add the same subnet for firewall. for example FG01: IP 192.168.17.1 FG02: IP 192.168.17.3 and so on. I hope I answer to your question.

[@pichaiw1481]

let me answer the situation with my idea. If you need the firewall to control the traffic for all vlans, you have to configure the vlan interface at the firewall but If you won't the firewall to control the traffic and need the switch to control the traffic per vlan with ACLs, you can config the firewall following your question. If my answer is not clear, please let me know.

[@tankirivann]

@@pichaiw1481 thank you for your idea. that the correct answer, we want the firewall control the traffic only go out to WAN so the the firewall will not use much resources. pls share if you have any other good ideas👍😊

[@pichaiw1481]

@@tankirivann The idea is correct if you don't have the high performance firewall to control all vlan traffic.

[@tankirivann]

@@pichaiw1481 thank you bro for sharing here, I also learn something from you. pls keep posting for good ideas solution😊❤

[@medalbronze3342]

What software you use ?

[@tankirivann]

hi bro, for these lab I use GNS3 with VMware. for video record/edit I use Filmora. I hope u get the answer thank you

[@phornya4293]

បងតេីfortigate ពេញនិយម​ប្រើប្រាស់​ទេ​តាមស្ថា​ប័នធំៗ​ដូច​ជា​ធនាគារ​ជាដេីម?

[@tankirivann]

អរគុណសំរាប់សំនួរមួយនេះ។ ខ្ញុំមិនអាចឆ្លើយបានទេពីព្រោះមិនដឹងទិន្ន័យច្បាស់ តែតាមអ្វីដែលខ្ញុំធ្លាប់ជួបក្រុមហ៊ុនមធ្យមនិងក្រុមហ៊ុនធំៗភាគច្រើនពួកគាត់ប្រើ cisco និង fortigate នេះឯង។ វាអាស្រ័យទៅលើអ្នកគ្រប់គ្រង infrastructure រួមទាំងថវិការបស់ក្រុមហ៊ុនជាក់ស្តែង។

[@phornya4293]

@@tankirivann thanks for your answer

[@tankirivann]

u welcome😊

[@ahmedtharihi6707]

configuration MPLS between Fortigate 100F with cisco router 3840

[@tankirivann]

Hi bro sorry for late reply and thank you very much for your request. I add this topic to my request list and I try my best to make this video. I hope to see you with my next video, thank you.

[@ahmedtharihi6707]

@@tankirivann could you set the link please

[@user-wq7ws6zq5u]

I do same steps but doesn't work, but the fortigate is virtual

[@tankirivann]

thanks bro for watching my VDO, pls share your configuration step so we can figure out the issue together.