[Sdwan-sec] I have figured out how to configure SD-WAN, Link Aggregation, Virtual IPs and IP Pools on Fortigate 200F and 201F Firewalls

Turritopsis Dohrnii Teo En Ming <tdtemccnp@gmail.com> Thu, 30 March 2023 15:32 UTC

MIME-Version: 1.0
From: Turritopsis Dohrnii Teo En Ming <tdtemccnp@gmail.com>
Date: Thu, 30 Mar 2023 23:32:38 +0800
Message-ID: <CAD3upLvDOVChj=xVxF20SyA6wKHR20oJ824ee6X15+w0KUwZXg@mail.gmail.com>
To: Sdwan-sec@ietf.org
Cc: ceo@teo-en-ming-corp.com
Content-Type: text/plain; charset="UTF-8"
Archived-At: <https://mailarchive.ietf.org/arch/msg/sdwan-sec/8wnrdSpz4OcLKiFzWcCiHKSsNzY>
Subject: [Sdwan-sec] I have figured out how to configure SD-WAN, Link Aggregation, Virtual IPs and IP Pools on Fortigate 200F and 201F Firewalls
Precedence: list

Subject: I have figured out how to configure SD-WAN, Link Aggregation,
Virtual IPs and IP Pools on Fortigate 200F and 201F Firewalls

Good day from Singapore,

I have figured out how to configure SD-WAN, Link Aggregation, Virtual
IPs and IP Pools on Fortigate 200F and 201F Firewalls, today, 30 Mar
2023 Thursday Singapore Time.

I have reviewed the existing configuration of Fortigate 200D firewall
for a wine company today. Subsequently I have also reviewed the
existing configuration of Fortigate 201F firewall for an investment
company today. The Fortigate 201F firewall has SD-WAN configured. I am
reviewing the configuration of existing Fortigate firewalls in
preparation for setting up brand new Fortigate 200F firewall in April
2023, if I have the opportunity to do so.

This is the reference guide on how to configure SD-WAN in Fortigate firewalls.

Article: Configuring the SD-WAN interface
Link: https://docs.fortinet.com/document/fortigate/7.2.4/administration-guide/218559/configuring-the-sd-wan-interface

This is the reference guide on how to configure Link aggregation (IEEE
802.3ad) in Fortigate firewalls.

Article: Aggregation and redundancy
Link: https://docs.fortinet.com/document/fortigate/7.2.4/administration-guide/567758/aggregation-and-redundancy

Regarding firewall policies (aka firewall rules)
================================================

A. Virtual IPs

Virtual IPs are needed for port forwarding.

If the direction of the traffic is from WAN to any other physical
interface, you are configuring port forwarding. Before you can
configure port forwarding, you must configure Virtual IPs. After
configuring Virtual IPs, you can proceed to configure firewall
policies (firewall rules) for port forwarding.

B. IP Pools

If your company/business/organization has many public static IPv4
addresses, you can force a server in your internal network to take on
a specific public static IPv4 address. This is known as masquerading.
IP Pool is applied in firewall policies for the direction of the
traffic from LAN to WAN, for example, from your mail server to the
internet. This direction of the traffic is known as outgoing internet
access.

I have become reasonably seasoned in configuring Fortigate firewalls,
after having configured Fortigate firewalls of various sizes for 8
different companies/organizations in Singapore. I have also configured
SSL VPN in Cisco ASA 5506-X firewall for an investment company in
Singapore previously (I think 2-3 years ago).

That's all folks. Please feel free to correct me if I am wrong. Hehe.

Regards,

Mr. Turritopsis Dohrnii Teo En Ming
Targeted Individual in Singapore
Blogs:
https://tdtemcerts.blogspot.com
https://tdtemcerts.wordpress.com
GIMP also stands for Government-Induced Medical Problems.

[Sdwan-sec] I have figured out how to configure S… Turritopsis Dohrnii Teo En Ming