Re: [Cluster-devel] I have been given the guide with full network diagram on configuring High Availability (HA) Cluster and SD-WAN for Fortigate firewalls by my boss on 10 May 2023 Wed

Re: [Cluster-devel] I have been given the guide with full network diagram on configuring High Availability (HA) Cluster and SD-WAN for Fortigate firewalls by my boss on 10 May 2023 Wed

[Bagas Sanjaya]

[-- Attachment #1: Type: text/plain, Size: 1562 bytes --]

On Wed, May 10, 2023 at 11:12:26PM +0800, Turritopsis Dohrnii Teo En Ming wrote:
> Good day from Singapore,
> 
> I have been given the guide with full network diagram on configuring
> High Availability (HA) Cluster and SD-WAN for Fortigate firewalls by
> my boss on 10 May 2023 Wed. This involves 2 ISPs, 2 identical
> Fortigate firewalls and 3 network switches.
> 
> Reference guide: SD-WAN with FGCP HA
> Link: https://docs.fortinet.com/document/fortigate/6.2.14/cookbook/23145/sd-wan-with-fgcp-ha
> 
> I have managed to deploy HA cluster and SD-WAN for a nursing home at
> Serangoon Singapore on 9 May 2023 Tue, with some minor hiccups. The
> hiccup is due to M1 ISP ONT not accepting connections from 2 Fortigate
> firewalls. Singtel ISP ONT accepts connections from 2 Fortigate
> firewalls without any problems though. On 9 May 2023 Tue, I was
> following the network diagram drawn by my team leader KKK. My team
> leader KKK's network diagram matches the network diagram in Fortinet's
> guide shown in the link above.
> 
> The nursing home purchased the following network equipment:
> 
> [1] 2 units of Fortigate 101F firewalls with firmware upgraded to version 7.2.4
> 
> [2] 3 units of Aruba Instant On 1830 8-port network switches
> 
> [3] Multiple 5-meter LAN cables
> 

Then why did you post Fortigate stuffs here in LKML when these are (obviously)
off-topic? Why don't you try netfilter instead? And do you have any
kernel-related problems?

Confused...

-- 
An old man doll... just what I always wanted! - Clara

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 228 bytes --]

Re: [Cluster-devel] I have been given the guide with full network diagram on configuring High Availability (HA) Cluster and SD-WAN for Fortigate firewalls by my boss on 10 May 2023 Wed

[Phil Sutter]

[ Dropped lkml and netdev lists.]

On Mon, Aug 21, 2023 at 09:11:34PM +0700, Bagas Sanjaya wrote:
> On Wed, May 10, 2023 at 11:12:26PM +0800, Turritopsis Dohrnii Teo En Ming wrote:
> > Good day from Singapore,
> > 
> > I have been given the guide with full network diagram on configuring
> > High Availability (HA) Cluster and SD-WAN for Fortigate firewalls by
> > my boss on 10 May 2023 Wed. This involves 2 ISPs, 2 identical
> > Fortigate firewalls and 3 network switches.
> > 
> > Reference guide: SD-WAN with FGCP HA
> > Link: https://docs.fortinet.com/document/fortigate/6.2.14/cookbook/23145/sd-wan-with-fgcp-ha
> > 
> > I have managed to deploy HA cluster and SD-WAN for a nursing home at
> > Serangoon Singapore on 9 May 2023 Tue, with some minor hiccups. The
> > hiccup is due to M1 ISP ONT not accepting connections from 2 Fortigate
> > firewalls. Singtel ISP ONT accepts connections from 2 Fortigate
> > firewalls without any problems though. On 9 May 2023 Tue, I was
> > following the network diagram drawn by my team leader KKK. My team
> > leader KKK's network diagram matches the network diagram in Fortinet's
> > guide shown in the link above.
> > 
> > The nursing home purchased the following network equipment:
> > 
> > [1] 2 units of Fortigate 101F firewalls with firmware upgraded to version 7.2.4
> > 
> > [2] 3 units of Aruba Instant On 1830 8-port network switches
> > 
> > [3] Multiple 5-meter LAN cables
> > 
> 
> Then why did you post Fortigate stuffs here in LKML when these are (obviously)
> off-topic? Why don't you try netfilter instead? And do you have any
> kernel-related problems?

I am not familiar with fortinet products, but the above neither mentions
"kernel", nor "netfilter" or even "linux". There's no evidence either of
the addressed kernel mailing lists should be concerned. I suggest to
contact fortinet support instead.

> Confused...

BtW: Adding yet another unrelated mailing list to Cc is just making
things worse.

Cheers, Phil

Re: [Cluster-devel] I have been given the guide with full network diagram on configuring High Availability (HA) Cluster and SD-WAN for Fortigate firewalls by my boss on 10 May 2023 Wed

[Bagas Sanjaya]

[-- Attachment #1: Type: text/plain, Size: 2551 bytes --]

[fixing up cluster-devel address]

On Wed, Aug 23, 2023 at 12:27:18PM +0200, Phil Sutter wrote:
> [ Dropped lkml and netdev lists.]
> 
> On Mon, Aug 21, 2023 at 09:11:34PM +0700, Bagas Sanjaya wrote:
> > On Wed, May 10, 2023 at 11:12:26PM +0800, Turritopsis Dohrnii Teo En Ming wrote:
> > > Good day from Singapore,
> > > 
> > > I have been given the guide with full network diagram on configuring
> > > High Availability (HA) Cluster and SD-WAN for Fortigate firewalls by
> > > my boss on 10 May 2023 Wed. This involves 2 ISPs, 2 identical
> > > Fortigate firewalls and 3 network switches.
> > > 
> > > Reference guide: SD-WAN with FGCP HA
> > > Link: https://docs.fortinet.com/document/fortigate/6.2.14/cookbook/23145/sd-wan-with-fgcp-ha
> > > 
> > > I have managed to deploy HA cluster and SD-WAN for a nursing home at
> > > Serangoon Singapore on 9 May 2023 Tue, with some minor hiccups. The
> > > hiccup is due to M1 ISP ONT not accepting connections from 2 Fortigate
> > > firewalls. Singtel ISP ONT accepts connections from 2 Fortigate
> > > firewalls without any problems though. On 9 May 2023 Tue, I was
> > > following the network diagram drawn by my team leader KKK. My team
> > > leader KKK's network diagram matches the network diagram in Fortinet's
> > > guide shown in the link above.
> > > 
> > > The nursing home purchased the following network equipment:
> > > 
> > > [1] 2 units of Fortigate 101F firewalls with firmware upgraded to version 7.2.4
> > > 
> > > [2] 3 units of Aruba Instant On 1830 8-port network switches
> > > 
> > > [3] Multiple 5-meter LAN cables
> > > 
> > 
> > Then why did you post Fortigate stuffs here in LKML when these are (obviously)
> > off-topic? Why don't you try netfilter instead? And do you have any
> > kernel-related problems?
> 
> I am not familiar with fortinet products, but the above neither mentions
> "kernel", nor "netfilter" or even "linux". There's no evidence either of
> the addressed kernel mailing lists should be concerned. I suggest to
> contact fortinet support instead.
> 

To Teo En Ming: Again you confuse kernel mailing lists (like LKML) with
Fortinet forum. If you really want the latter, you're welcome at its
official community [1].

> > Confused...
> 
> BtW: Adding yet another unrelated mailing list to Cc is just making
> things worse.

At the time I added netdev since IMO this was a networking topic.

Thanks.

[1]: https://community.fortinet.com/

-- 
An old man doll... just what I always wanted! - Clara

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 228 bytes --]