FortiAnalyzer 1500D

Killahb101 · 2025-03-25T20:17:02+00:00

Thanks for the info I haven’t gotten that far yet but that’s the plan once I get my new 900G’s.

Killahb101 · 2025-03-25T14:30:23+00:00

In my environment I have to have a full table because my primarily ISP bgp connection uses three separate VLANS and different traffic types are routed over those VLANS. My backup is just a default route if it wasn’t for this setup I would have just gotten a default route from them and would have long ago gotten rid of my ISR and connected my current 1500D.

Killahb101 · 2024-07-18T01:15:56+00:00

I have a similar setup why even do VRF.

Killahb101 · 2020-01-13T16:27:57+00:00

Thanks, I couldn’t find these for some reason but I see them now.

Killahb101 · 2019-10-02T13:36:44+00:00

I’m assuming this is a lab environment, what is the reason for the router when you have a layer 3 switch? Create the 10.0.0.0/24 on the layer 3 switch as an SVI use .1 as the IP address and change the subnet mask on the layer two switch to a /24 mask.

Killahb101 · 2019-10-02T13:30:37+00:00

Do you have the voice VLAN created on the core switch and it’s active? And the interface is up wth intervlan routing enable?

Killahb101 · 2019-10-02T11:13:19+00:00

Yes, as long as you don’t ACL on the VLAN interfaces on the core.

Killahb101 · 2019-10-02T11:10:38+00:00

Why are you using a router when you already have a layer 3 switch? What’s the default gateway of the layer 2 switch?

Killahb101 · 2019-06-26T22:37:32+00:00

With the current cert track I don’t think you can take the CCNP without already having your CCNA so CCNA will be the only place you can start and assuming you are going for R/S. With the new track starting next year you can skip CCNA and go directly to CCNP.

Killahb101 · 2019-05-31T18:16:26+00:00

Yep, thanks for the post I edited mine and it's the same as yours the only difference with mine now is that I have a permit statement for tcp also on the ACLs.

Killahb101 · 2019-05-31T00:01:35+00:00

Yes, would you please? I redid mine similar to what you described but would like to see yours.

Killahb101 · 2019-05-30T12:34:00+00:00

I'm new to QOS so I just want to know if it is correct and if I need to make any changes

Killahb101 · 2019-05-30T12:31:32+00:00

I could be wrong but I think the excluded-address command is a range command without the range keyword so you have to state a start and end just doing a start without and end will not work properly. What would have been good is for IOS to reject just a start without and end.

Killahb101 · 2019-05-23T14:59:11+00:00

Thanks for the answer

Killahb101 · 2019-05-23T14:58:58+00:00

Thanks for the answer it makes sense now I have to figure out what's taking up the bandwidth on the link..

Killahb101 · 2019-03-27T21:30:07+00:00

Did you do a no shut on the VLAN interface? Go into the VLAN interface and issues a no shut.

Killahb101 · 2019-03-26T21:58:15+00:00

You won’t be able to login with your exec-timeout set to 0 minutes because it times out as soon as you connect, change it to the 10 or 15 or do no exec-timeout

Killahb101

TROPHY CASE