I need help in setting up my network, currently I have the following setup.
All the computers can browse the internet but when I tried to create a two groups (a group that can access the internet and a group that can't access the internet) using Device MAC Access Control but to no avail still all the computers can access the internet. I follow the instructions in the Fortigate Cookbook (FORTI OS 5.4), Fortigate seems cannot recognize/identify MAC Addreses of the computers int the network.
... View more
My setup is ADSL router -> Firewall -> Layer 3 Switch -> Layer 2 Switch. Does that mean that there will be no static routes on my firewall pointing to my layer 3 switch?
... View more
Yes it will work. However when I tried to setup the second switch in layer 2 mode, I cannot communicate on the VLANS on my first switch. I setup a trunk port on my first switch (gi2) and same on my second switch (gi1). Here's the setup that I tried.
First Switch:
gi3-g5 are assigned to Vlan 10 - Access ports
gi6-g8 are assigned to Vlan 20 - Access ports
gi9-gi12 are assigned to Vlan 30 - Access ports
Second Switch
gi2-g4 are assigned to Vlan 10 - Access ports
gi5-g6 are assigned to Vlan 20 - Access ports
gi7-gi8 are assigned to Vlan 30 - Access ports
Is there something that I miss in setting-up the second switch? My only problem in the first switch at first is that I cannot browse the internet but when I add a static route pointing to the firewall solves my problem. If DHCP is possibleo on the second, can I just plug to a particular port, let's say in gi5 which is assign to vlan 20 and the layer 3 switch assign me an address?
... View more
I am a beginner in networking and our recently purchased two SG300 switches. The first switch is configured as Layer 3 switch with the following VLANS.
Vlan 1: 192.168.1.2 255.255.255.0
Vlan 10: 192.168.10.1 255.255.255.0
Vlan 20: 192.168.20.1 255.255.255.0
Vlan 30: 192.168.30.1 255.255.255.0
Vlan 40: 192.168.40.1 255.255.255.0
IPv4 Static Routing
Destination IP Prefix
Prefix Length
Route Type
Next Hop Router IP Address
0.0.0.0
0
Default
192.168.1.1
In the network we have a Fortigate 90D firewall with the following static routes:
Destination: 0.0.0.0/0 Gateway: 192.168.254.254
Destination: 192.168.10.1/24 Gateway: 192.168.1.1
Destination: 192.168.20.1/24 Gateway: 192.168.1.1
Destination: 192.168.30.1/24 Gateway: 192.168.1.1
Destination: 192.168.40.1/24 Gateway: 192.168.1.1
I need some help/suggestion on what to do with my second switch, since it will be deployed in a separate floor in the building. My first switch is configured with a DHCP Server Network Pool.
My questions are
Can the Vlans in the first and second switch communicate each other?
Is it possible that the second switch can get addresses from the DHCP Network in the first switch?
Thank you in advance!
... View more