VRFs are an excellent tool for Layer 3 separation on a router. Allowing you to separate routing domains and control where traffic can be routed, much like VLANs on a Switch. VRFs are also required for MPLS L3VPN deployments. There may be a requirement for you to leak routes from Read more…
I am going to walk through how the LSP (Label Switched Path) is found on Cisco devices running LDP and go through a practical demonstration. First, lets look at our topology: In this demonstration we are looking at the path for traffic originating from CE_CUSTA_2 to CE_CUSTA_1. Let’s look at Read more…
This is a follow on from a previous guide where I showed how to setup Kerberos and NTLM Proxy Authentication on the FortiGate. This guide aims to build on that and setup firewall rules to push a transparent Web Filter Profile to users that do not configure the proxy on Read more…
This guide assumes you have a functioning Active Directory domain already setup. First lets have a look at the environment: FortiGate – 10.12.92.254DC01 – 10.12.92.252 Domain name: avidpontoon.co.uk Domain Controller Configuration The initial configuration we will complete on the Domain Controller. We need to setup a service account for the Read more…
Now we have tested that live motion works and that now all aspects of the network have been tested, we can begin the migration from Standard vSwitches to Distributed vSwitches. This allows central management of cluster networking. We will begin by creating the new Distributed vSwitches we need. Creating Distributed Read more…
In the last section, we configured FSSO and setup the Groups on the FortiGate to interface with the FSSO Groups. Now, we will Setup the web proxy and policies for the proxy too. First, we need to enable the Explicit Proxy within the FortiGate. To do this, select ‘Feature Visibility’ Read more…
FSSO is a mechanism that allows a FortiGate to know who is logged into a domain joined computer, and transparently assign the device policies based on that users attributes (like group membership). This is fully transparent to users as the processing is done between the Domain Controller and the FortiGate. Read more…
Now we have provisioned and setup the first VM on the cluster, we can test to see if vMotion is working. A high level overview of vMotion is that it allows the live migration of VM’s between physical hosts within the cluster. This happens with zero downtime. The most we Read more…