Great tutorial! Not often you see this video tutorials this good - many thanks. And a well named channel: To-the-point Fortinet. I will be coming back for more!
@harsha1908
Жыл бұрын
This was so straightforward and easy to understand. Thanks!
@balla2172
8 ай бұрын
My god i wish i.had as much knowledge as you
@bigkeoni6429
2 жыл бұрын
Great explanation - thank you!
@advegav
2 жыл бұрын
Thanks a lot! It worked as a charm!!!
@pineapplerocks
2 жыл бұрын
Broooo! You saved the day!
@netconfig999
3 ай бұрын
thanks for sharing this VD
@Salmankhan-wb4xi
2 жыл бұрын
Thanks foe your work..
@coffeeboyclips1973
Ай бұрын
Tried this so many times and changed options, my tunnel always shows inactive
@IshtiaqkhanOfficiall
Жыл бұрын
Amazing .
@donmorris1373
2 жыл бұрын
Great explanation. Is it compulsory to have both FORTIGATE WAN adresses to belong to the same public IP network ? Let's Say that WE have 2 different companies and the was not communicating before and their WAN adresses are not on the same network.
@tothepointfortinet3823
2 жыл бұрын
Hi Don, no they don't need to be on the same network, in my case they were because I am simulating it in my lab. Generally, WAN IP's will be on different networks; so as long as both FortiGate's can route traffic to eachother, then you can set up a tunnel between the two.
@prosperngwenya6499
Жыл бұрын
So So Clear.. Thank you
@mahuubao
Жыл бұрын
Excellent ... well done ...
@user-eg7fi9js3s
Жыл бұрын
great
@victorpenasanchez1167
8 ай бұрын
What a great video! I am new with fortinet and I have a question: When setting up WAN interfaces for remote Sites, does these IP addresses have to be in Manual? I ask because if they are on DHCP, would the VPN be lost right?
@DJSerpent
Ай бұрын
you should have a static WAN IP for each remote site.
@techhmaninder
Жыл бұрын
Can you make a tutorial video for redundant ipsec tunnel , I am using two ISP in my firewall
@judgezee9371
Жыл бұрын
This is great. Just a few questions Which model is this you are using? Have you tested file sharing/transfers? setup something like this between 2 locations on USGs. Found that simultaneous file transferring slowed down quite a bit on a 100/100 speed.
@tothepointfortinet3823
Жыл бұрын
The model is FortiGate 61E - I didn't test file sharing while making this video. Here's 2 things to consider when troubleshooting IPsec site-to-site slow down between sites (or at least a couple easy ones to check off quickly): 1) Test a different protocol -> so try Iperf instead of SMB to isolate if the issue is specific to the USG inspection with SMB (USG is an Ubiquiti device right?) 2) Do an ISP test without IPsec -> so lets say you run a speed test on a workstation at both sites and you get 100Mbps for both tests -> this does NOT mean that SMB between sites will be the 100Mbps -> often the ISP will give you the best throughput to speedtest servers but when you test between different sites you might see a much lower value. It really depends on how much the ISPs will shape/throttle between each public IP -> you can test this with a forwarding rule on both sites, here's the FortiGate configuration on how to do it: kzitem.info/news/bejne/0W6DvGeammt1a6Q --> or to rule out firewall entirely you can place a laptop directly to each ISP modem for a moment to test (if possible in your environment) -> generally even with this test, the two ISP's will throttle you down significantly from 100Mbps unless maybe you have dedicated lines
@judgezee9371
Жыл бұрын
@@tothepointfortinet3823 alright thanks for this. I'll try the above
@screamusor
Жыл бұрын
Hello, thanks for your really great video. Why do you use the 'custom' option when setting up the VPN instead of the 'site-to-site' ?
@tothepointfortinet3823
Жыл бұрын
Some of the other options work well because they do more for you such as creating static routes and firewall policy config. I used custom as the option because then it require manual configuration of routes + policies so that I could show more detail about what's required to configure everything.
@fernandeselikemgeoffrey3173
2 жыл бұрын
Hi, can you help with WAN, LAN and Site to Site VPN configuring on Fortigate 300D.... Thank you
@landotbanares1925
2 жыл бұрын
Hi Bro, Pls can you share the setup also Firewall behind the router? thanks
@MotoristangOpaw
Жыл бұрын
Looking for this too. I need to setup multiple sites behind ISP router
@hali1337
6 ай бұрын
And If one Site have dynamic IP wann? Dialup VPN?
@tothepointfortinet3823
6 ай бұрын
Yes that's one approach. Another could be to specify the FQDN on the side which has a static IP
@Shubhontube
Жыл бұрын
What is selector in fortigate
@techtutorialcentral
10 ай бұрын
Creating address objects is what I'm stuck on and the video says "I've pre created some" man I wish that part was explained. I'm trying to setup a VPN to Azure and I'm not sure which "object" type to use.
@tothepointfortinet3823
10 ай бұрын
Go to Policy & Objects > addresses
@techtutorialcentral
10 ай бұрын
@@tothepointfortinet3823 Thanks. I finished setting up my tunnel to Azure today.
@ferozsyed2014
Жыл бұрын
does this work with different vendor ? like Fortigate & Sonic or sophos ?
@tothepointfortinet3823
Жыл бұрын
Yea this will work for other vendor too, just need to match the setting sun sonicwall gui
@danohgaming7047
Жыл бұрын
Hi great video!! I was just wondering how DNS could be set through this ? Do you have any guides or intel on it ? Thanks :)
@tothepointfortinet3823
Жыл бұрын
A site to site doesn't push config to any type of client so you can't set DNS from the FortiGate in this case. But, you can set a DNS server if you use a remote dial up IPsec tunnel or SSL tunnel
@kofiobeng1656
2 жыл бұрын
Hi Bro great, have created a tunnel but I can't access HTTP resource on the remote subnet (intranet running on remote LAN)
@tothepointfortinet3823
2 жыл бұрын
Here's some videos that will help to troubleshoot: Packet capture: kzitem.info/news/bejne/zpuOuqGLkXqCon4 IPsec Troubleshooting: kzitem.info/news/bejne/mmd94KKHrWScrZw
@fdude555
2 жыл бұрын
Is this an example of a route based vpn or policy based vpn? Have always been confused by the two.
@tothepointfortinet3823
2 жыл бұрын
This would be considered a route based VPN
@silentreader8426
4 ай бұрын
same question
@aimn19861
2 жыл бұрын
What if both sites are behind NAT?
@tothepointfortinet3823
2 жыл бұрын
This should still work fine, you'd need to lab it to find all caveats, but here's a couple to consider: - Port forward both port 500 and 4500 on firewall the FortiGate's are behind - enable NATT on both ends
@naveenkumar3159
2 жыл бұрын
Hi Bro this is naveen from india im watching so many videos regarding vpn but i didn't get the clarity. after creating everything vpn client is not connecting i'm doing the labs in vmware please suggest me how to complte
Пікірлер: 46