There's a feature of FortiSwitch called 'Access VLAN' (I think they changed the name from a previous version, but that's what they call it now). 'Access VLANs are VLANs that aggregate client traffic solely to the FortiGate unit. Enable Two-Factor Authentication (2FA)/MFA for Fortinet Fortigate Client to extend security level. They requested an IPSec VPN to access via the FortiClient. The use case is as such: PLC vendor needs access to specific VLAN on our network so they can remotely manage their systems. new features that are different from the SonicOS 6.2 and earlier firmware.

This prevents direct client-to-client traffic visibility at the layer-2 VLAN layer. FortiClient IPSec VPN to VLAN Hi All, I'm tired of beating my head against this wall and am hoping one of you may have a sledgehammer or wrecking ball I can borrow. Click VPN Access tab and make sure LAN Subnets is added under Access list. Click on Customization in the left menu of the dashboard.

In Basic Settings, set the Organization Name as the customdomain name. Has anyone successfully used this feature? Huge thanks in advance! I'm testing this feature on a lab and, for the life of me, the two laptops I have on this test fortilink VLAN are able to ping each other regardless of the access VLAN.Īfter the client traffic reaches the FortiGate, the FortiGate unit can then determine whether to allow various levels of access to the client by shifting the client's network VLAN as appropriate.' Clients can only communicate with the FortiGate unit.

Here's my config (FG-300D on FortiOS 6.0.

Fortinet vpn client access other vlans