ADSL -> Cisco 800 -> Fortinet 60 -> LAN : cisco, 800, fortinet, 60

May 17, 2008 07:24am pdt

1. lrmoore 155,848
2. donjohnston 126,510
3. JFrederi... 123,725
4. batry_boy 89,036
5. RobWill 70,641
6. that1guy15 60,905
7. donmanrobb 57,985
8. giltjr 47,285
9. from_exp 41,685
10. naughton 36,460
11. dpk_wal 35,950
12. bfason 35,895
13. arnold 28,700
14. stuknhawaii 28,000
15. logic2 27,320

1. lrmoore 2,817,538
2. JFrederi... 1,084,036
3. donjohnston 992,931
4. mikebern... 608,438
5. rsivanandan 339,216
6. Dr-IP 293,929
7. RobWill 285,930
8. harbor235 241,391
9. kbbcnet 200,499
10. Scotty_c... 186,404
11. calvinetter 180,631
12. batry_boy 178,446
13. giltjr 160,866
14. pseudocyber 156,145
15. pjtemplin 152,803

07.31.2007 at 03:20AM PDT, ID: 22731162

	[x] Attachment Details

[x]

The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

The Grade of the Solution
The Zone Rank of the Expert Providing the Solution
The Number of Author and Expert Comments
The Number of Experts Contributing
The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

8.2

ADSL -> Cisco 800 -> Fortinet 60 -> LAN

Zones: Network Routers, Networking Hardware Firewalls

Tags: cisco, 800, fortinet, 60

Hi all,

I have a Cisco 800 and a Fortinet 60 that I am trying to get working together,

My setup is; ADSL -> Cisco 800 -> Fortinet 60 -> LAN

Currently clients from the LAN can browse, and everything can ping the next in the series, but I am unable to get external traffic to come in (I am trying to get the PPTP server on the Fortinet working)

I think the problem is the Cisco, so would appreciate any help getting this going.

Thanks

-red

Start your free trial to view this solution

Question Stats

Zone: Computer Hardware

Question Asked By: redseatechnologies

Solution Provided By: lrmoore

Participating Experts: 2

Solution Grade: A

Translate:

Loading Advertisement...

Microsoft

Internet Protocols
Applications

Development
OS

Hardware
Windows Security

Apple

Operating Systems
Hardware

Programming
Networking

Software

Internet

Search Engines
File Sharing
WebTrends / Stats
Spy / Ad Blockers

Web Browsers
New Net Users
Web Development
Chat / IM

Anti Spam
Web Servers
Anti-Virus
Email Clients

Gamers

Tips
Online / MMORPG
Puzzle
Emulators

Action / Adventure
Role Playing
Consoles
Game Programming

Strategy
Sports
Misc
Computer Games

Digital Living

Hardware
New Net Users
New Users

Software
Digital Music
Gaming World

Home Security
Apple
Networking Hardware

Virus & Spyware

Vulnerabilities
IDS
Encryption
Anti-Virus

Operating Systems Security
Software Firewalls
WebApplications
Cell Phones

Operating Systems
Internet
Hardware Firewalls

Hardware

Handhelds / PDAs
Displays / Monitors
Components
Networking Hardware

Peripherals
Laptops/Notebooks
Storage
Servers

Desktops
New Users
Misc
Apple

Software

System Utilities
Industry Specific
Network Management
Photos / Graphics
Page Layout
VMWare
Misc
Web Development

OS
CYGWIN
Voice Recognition
Message Queue
Quality Assurance
Security
Firewalls
MultiMedia Applications

Development
Database
Office / Productivity
Business Management
OS/2 Apps
Server Software
Internet / Email

ITPro

OS
Storage
Encryption
Operating Systems Security
Apple Hardware
Laptops & Notebooks
Servers
Networking Hardware
Peripherals

Devices
Displays / Monitors
WebTrends / Stats
Search Engines
Firewalls
WebApplications
IDS
Vulnerabilities
Email Clients

File Sharing
Spy / Ad Blockers
Web Browsers
Web Servers
Networking
Anti-Virus
Chat / IM
Anti Spam

Developer

Web Servers
Web Browsers
Game Programming
Dev Tools
Industry Specific
Office / Productivity

Database
CYGWIN
Web Development
Search Engines
File Sharing
WebTrends / Stats

Programming
Content Management
Application Servers
Protocols

Storage

Removable Backup Media
Storage Technology
Servers

Grid
Remote Access
Backup / Restore

Misc
Hard Drives

Miscellaneous
Security
Development
Linux
VMWare

MainFrame OS
Unix
Apple
OS / 2
AS / 400

BeOS
Microsoft
VMS / OpenVMS

Database

Oracle
Miscellaneous
MySQL
Software
Sybase
Contact Management
PostgreSQL
Data Manipulation
Clarion
InterSystems Cache

Siebel
MUMPS
OLAP
SQLBase
SAS
GIS & GPS
4GL
Berkeley DB
DB2
Informix

Interbase / Firebird
FoxPro
Reporting
LDAP
Filemaker Pro
MS SQL Server
dBase
MS Access

Security

Misc
Web Browsers
Software Firewalls
Operating Systems Security
File Sharing

Spy / Ad Blockers
Vulnerabilities
WebApplications
IDS
Anti-Virus

Encryption
Anti Spam
Email Clients
VPN
Chat / IM

Programming

Editors IDEs
Installation
Handhelds / PDAs
Multimedia Programming
System / Kernel

Algorithms
Game
Signal Processing
Project Management
Open Source

Database
Misc
Languages
Processor Platforms
Theory

Web Development

Scripting
Blogs
Web Servers
Software
Search Engines
Web Graphics
Images

Internet Marketing
Images and Photos
Components
Document Imaging
Web Languages/Standards
Illustration
WebApplications

Fonts
WebTrends / Stats
Authoring
Digital Camera Software
Miscellaneous

Networking

Protocols
Apple Networking
Network Management
Message Queue
Application Servers
Content Management
File Servers
Email Servers
Misc
Java Editors & IDEs

Wireless
Networking Hardware
Backup / Restore
System Utilities
ISPs & Hosting
Web Servers
Storage Technology
Removable Backup Media
Servers
Broadband

Grid
OS / 2
Novell Netware
Unix Networking
Windows Networking
Security
Telecommunications
Operating Systems
Linux Networking

Other

Community Advisor
Lounge
Community Support
New Net Users

Philosophy / Religion
Math / Science
Miscellaneous
URLs

Expert Lounge
Politics
Puzzles / Riddles

Community Support

Suggestions
New to EE
New Topics
Community Advisor

CleanUp
Announcements
General

Feedback
Input
EE Bugs

07.31.2007 at 03:22AM PDT, ID: 19598942

redseatechnologies:

My config is here -> http://www.ee-stuff.com/Expert/Upload/getFile.php?fid=4208

07.31.2007 at 07:13PM PDT, ID: 19605837

Rank: Genius

lrmoore:

Have you considered putting your router in bridge mode?

bridge 1 protocol ieee
interface dialer 0
no ip address
bridge-group 1
interface vlan 1
no ip address
bridge-group 1

This should allow the Fortigate to do the ppoa authentication and get the public IP address.

Accepted Solution

07.31.2007 at 07:18PM PDT, ID: 19605851

redseatechnologies:

I had considered that, and would happily do so (that was actually my thoughts on the first question), the thing I am not sure of there is; will the fortigate be able to handle the authentication when the router has the modem?

Thanks lrmoore.

08.01.2007 at 04:05AM PDT, ID: 19607633

Rank: Genius

lrmoore:

Unfortunately, I don't know the fortigate product...

08.01.2007 at 04:30AM PDT, ID: 19607761

redseatechnologies:

Me either :/

So assuming I can't find a way to make the fortigate do the authentication, how can I make the cisco router do the authentication and still allow everything through?

08.04.2007 at 01:15PM PDT, ID: 19631978

redseatechnologies:

OK, the fortigate will not do the authentication.

So, I suppose my only other option is to double nat this puppy, or take it out entirely - either which I would be happy to do.

I have a feeling that I tried natting dialer0 accross, but there were problems,

As it is PPTP, I want to do a 1:1 nat of our dialer0 ip to a single lan ip, and then still allow other clients to get out - is that possible?

so,

ip nat inside source static 192.168.x.x dialer0

?

Thanks,

-red

08.05.2007 at 09:10PM PDT, ID: 19636339

shver:

According to the documentation at:

http://docs.forticare.com/fgt/install/FortiGate-60_series_Install_Guide_01-30004-0266-20070615.pdf,

the Fortigate 60 will do PPPoE authentication. Your Service Provider should be able (or already is) to provision your line as PPPoE. This means you can put your Cisco 800 in bridge mode and use the FortiGate to do auth.

With the live IP now at the FortiGate you can then open services for external access.

I have done this with a number of FortiGate and Netscreen devices with no issues.

08.05.2007 at 10:39PM PDT, ID: 19636532

redseatechnologies:

It does have the PPPoE section, and I have tried putting in the same details as is in my config (at the start of this Q) and it is still not playing nicely.

Is there anything else that I would need to do, bearing in mind that my cisco config is connecting fine, to make this work?

Thanks shver

-red

08.05.2007 at 10:52PM PDT, ID: 19636559

shver:

Your Cisco is running in PPPoA mode. You'll need to talk to your service provider about getting PPPoE enabled. Then simply follow the instructions from Irmoore above to set your Cisco to bridge mode and try your PPPoE auth on the FOrtiGate again.

Good luck.

Assisted Solution

08.05.2007 at 11:15PM PDT, ID: 19636599

redseatechnologies:

Ahhhh, got it, leave it with me

Thanks

-red

08.16.2007 at 03:38PM PDT, ID: 19713259

redseatechnologies:

OK, long story short - it isn;t going to work.

I have spoken to my supplier, and fortunately because of who my client is, they are going to take back this Forti, replace it with one with a built in ADSL modem, and then I will remove the Cisco unit altogether.

Thank you both for your help.

-red

20080236-EE-VQP-29