Wikisysop at 09:19, 16 August 2024

2024-08-16T09:19:08Z

← Older revision		Revision as of 09:19, 16 August 2024
Line 73:		Line 73:
	Once login we can see the FW version.		Once login we can see the FW version.

	[[File:~~IA44A~~ Info ~~System Section~~.png\|frameless\|620x620px]]		[[File:Info system RC44.png\|frameless\|620x620px]]

	Change the IP address to required IP, in this testing we are using 192.168.11.1 IP address.		Change the IP address to required IP, in this testing we are using 192.168.11.1 IP address.

Wikisysop: Created page with "'''Prerequisite:''' * FortiGate firewall * SILBO Router or gateway * Static Public IP on wired internet connection * SIM card with active internet Note: This document is prepared using FortiGate FW v7.0.13 & SILBO 1.16_1.13 FW version. FortiGate VPN setup Create a new IPSec tunnel via VPN -> IPSec Tunnels -> (+) Create New 624x624px IPsec Wizard will open, then follow below steps: * Give a name to IPsec VPN to Identify..."

2024-08-16T09:17:26Z

Created page with "'''Prerequisite:''' * FortiGate firewall * SILBO Router or gateway * Static Public IP on wired internet connection * SIM card with active internet Note: This document is prepared using FortiGate FW v7.0.13 & SILBO 1.16_1.13 FW version. FortiGate VPN setup Create a new IPSec tunnel via VPN -> IPSec Tunnels -> (+) Create New frameless|624x624px IPsec Wizard will open, then follow below steps: * Give a name to IPsec VPN to Identify..."

New page

'''Prerequisite:'''

* FortiGate firewall
* SILBO Router or gateway
* Static Public IP on wired internet connection
* SIM card with active internet

Note: This document is prepared using FortiGate FW v7.0.13 & SILBO 1.16_1.13 FW version.

FortiGate VPN setup

Create a new IPSec tunnel via VPN -> IPSec Tunnels -> (+) Create New

[[File:FortiGate_VPN_Setup.png|frameless|624x624px]]

IPsec Wizard will open, then follow below steps:

* Give a name to IPsec VPN to Identify
* Select “Site to Site” and select remote device as “Cisco”

* Select “No NAT between sites” Option

[[File:FortiGate_VPN_setup_Wizard.png|frameless|624x624px]]

* WAN IP address of a SILBO Router/gateway (As we do not have fix WAN IP, we provided a LAN IP and that will be removed later during ????????)
* Select Outgoing Interface to the one that FortiGate will be using to communicate with Remote Device that is WAN interface.
* Choose a pre-shared key and make sure you will configure in SILBO device and click next.

[[File:FortiGate_VPN_setup_Wizard_1.png|frameless|624x624px]]

* Select Internal (FortiGate’s LAN) interface that you wish to use in IPsec.
* Local Subnets field will populate automatically.
* Put SILBO LAN subnet in Remote Subnets field and click on next.

[[File:FortiGate_VPN_setup_Wizard_2.png|frameless|624x624px]]

Verify all the configurations as shown

[[File:FortiGate_VPN_setup_Wizard_3.png|frameless|624x624px]]

In case you wish to add more tunnels you can do.

[[File:FortiGate_VPN_setup_Wizard_4.png|frameless|624x624px]]

Once configuration is saved it should show as below.

[[File:FortiGate_VPN_setup_Wizard_Final.png|frameless|624x624px]]

Now convert the tunnel to custom as shown below.

[[File:Converting_tunnel_to_custom.png|frameless|624x624px]]

Once saved it should move to custom VPN as shown below.

[[File:Fortigate_Firewall_Custom_VPN.png|frameless|624x624px]]

Start editing configuration further as shown in below images.

[[File:Fortigate_Firewall_Configuration_further.png|frameless|624x624px]]

[[File:Fortigate_Firewall_VPN_Configuration.png|frameless|624x624px]]

[[File:Fortigate_Firewall_VPN_Configuration_1.png|frameless|624x624px]]

[[File:Fortigate_Firewall_VPN_Configuration_2.png|frameless|596x596px]]

'''Configuring SILBO Router/gateway:'''

'''Login to router using default IP 192.168.10.1 and default credentials admin/admin.'''

[[File:Log_In.png|frameless|624x624px]]

Once login we can see the FW version.

[[File:IA44A Info System Section.png|frameless|620x620px]]

Change the IP address to required IP, in this testing we are using 192.168.11.1 IP address.

To do that Navigate to Settings>>Network from 192.168.10.1 to 192.168.11.1 and save / update.

Upon IP changed configure VPN.

Navigate to >> Settings>>VPN>> IPsec>> and do as per below images

[[File:Fortigate_firewall_VPN_config.png|frameless|624x624px]]

[[File:Fortigate_Firewall_VPN_Configuration_Dashboard.png|frameless|624x624px]]

Once all the configuration is correctly configured and clicked on save button device will show VPN configuration >> General settings.

Save and then navigate to VPN>>Ipsec setting page and click on update.

In some time IPsec will come up and it can be seen as established as shown below.

[[File:VPN_IPSEC_changes_RC44.png|frameless|624x624px]]

Also in FortiGate it can be seen as below.

[[File:Fortigate_status.png|frameless|624x624px]]

To Ping server LAN, navigate to features>>Others and give LAN IP and ping.

If the ping is not working then check the firewall side settings whether the ping is allowed or not.

[[File:Fortigate_VPN_Others_Options.png|frameless|624x624px]]

IPsec VPN between SILBO RC44 and Fortigate firewal - Revision history

Wikisysop at 09:19, 16 August 2024