I then spent ten minutes to test unplug and plug the patch cables on these 3 switches to simulate all kinds of failures and this time, my VPN issues are fully resolved. I then patched port 12 to 12, port 11 and 11 go to two ISP Cisco routers and port 10 and 10 each go to the respective Fortigate internet port. You MAY have to adjust this range accordingly to your network scheme (this is adjusted under Network -> Address Objects). No client hardware or software needs to be installed. It builds a Virtual Private Network on Internet in minutes. Mouse-over the Address for IPv4 column, and note the address range selected for SSL VPN IP Pool. Insistsoft SSL VPN Server is Secure Sockets Layer (SSL) VPN software solution for Windows. I bypassed that mini switch with my own redundant setup thru a new 3 port hardware switch inside each Fortigate (deleted port10, 11 and 12 from lan hardware switch and create another hardware switch, added these 3 ports and made sure STP is enabled on these two switches (one in each firewall) and no IP was specified on these switches so that they remain isolated from the network and simply behave as a 3 port hub. Go to SSL VPN -> Client Settings and click on the configuration/edit button. So we had a mini switch sitting in between ISP CPE routers and the two firewalls.
We have a redundant Internet service wherein ISP provides two handoffs each from a different ISP router onsite and these two Cisco routers run HSRP (like VRRP) and they require a L2 passthru. Depending on which SonicWALL SSL VPN appliance you are using, you may need to modify these instructions accordingly.
The problem was not with Fortigate setup, but I suspected that it has to be with how FGCP clustering protocol shifts around the IPs on the interfaces, and thus resulting mac address association with L2 switch upstream and downstream.
0 kommentar(er)
