Forti | Gateway WiFi

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Seting Interface (Firewall Forti Gateway)

Statik Route

Security-Policy (IN to OUT)

Security-Policy ( OUT to  IN )

 

HA (High Availability)

Config Di Switch -Disti-A
vlan 10

interface Ethernet1/1
  description "Link to Forti-01"
  switchport access vlan 10
  channel-group 1 mode active

interface Ethernet1/2
  description "Link to Forti-01"
  switchport access vlan 10
  channel-group 1 mode active

interface Ethernet1/3
  description "Link to Forti-02"
  switchport access vlan 10
  channel-group 2 mode active

interface Ethernet1/1
  description "Link to Forti-02"
  switchport access vlan 10
  channel-group 2mode active

 interface port-channel 1
  description "Link to Forti-1"
  switchport access vlan 10

interface port-channel 2
  description "Link to Forti-2"
  switchport access vlan 10

interface Vlan10
  description "Link to Forti-01"
  no shutdown
  ip address 10.1.1.2/30
  ip ospf passive-interface
  ip router ospf 1 area 0.0.0.0

exit

Routing Statik
ip route 172.16.10.0/24 10.1.1.1 name VENDOR
ip route 172.16.20.0/24 10.1.1.1 name HR
ip route 172.16.30.0/24 10.1.1.1 name FIANCE

Config Di Switch -Disti-02
vlan 10

interface Ethernet1/1
  description "Link to Forti-01"
  switchport access vlan 20
  channel-group 1 mode active

interface Ethernet1/2
  description "Link to Forti-01"
  switchport access vlan 20
  channel-group 1 mode active

interface Ethernet1/3
  description "Link to Forti-02"
  switchport access vlan 20
  channel-group 2 mode active

interface Ethernet1/1
  description "Link to Forti-02"
  switchport access vlan 20
  channel-group 2mode active

 interface port-channel 1
  description "Link to Forti-1"
  switchport access vlan 20

interface port-channel 2
  description "Link to Forti-2"
  switchport access vlan 20

interface Vlan10
  description "Link to Forti-01"
  no shutdown
  ip address 10.2.2.2/30
  ip ospf passive-interface
  ip router ospf 1 area 0.0.0.0

exit

Routing Statik
ip route 172.16.10.0/24 10.2.2.1 name VENDOR
ip route 172.16.20.0/24 10.2.2.1 name HR
ip route 172.16.30.0/24 10.2.2.1 name FIANCE

router ospf 1
router-id 192.168.255.1

VERIFIKASI

 

 

Berbagi :