There's a feature of FortiSwitch called 'Access VLAN' (I think they changed the name from a previous version, but that's what they call it now). 'Access VLANs are VLANs that aggregate client traffic solely to the FortiGate unit. additional VLANS are the Registration, Remediation, Dead End, VPN, Authentication, Isolation. Enable Two-Factor Authentication (2FA)/MFA for Fortinet Fortigate Client to extend security level. This prevents direct client-to-client traffic visibility at the layer-2 VLAN layer. Click on Customization in the left menu of the dashboard. Any suggest how to should trouble this issue Sorry I am not good on Fortigate, also the end user did not renewal the support services. Under the office location user can access any vlan. IPsec VPN client can access VLAN1 but can not access VLAN2. In Basic Settings, set the Organization Name as the customdomain name. Office LAN include multi VLANs on one location (NOT site to site).

Has anyone successfully used this feature? Huge thanks in advance! I'm testing this feature on a lab and, for the life of me, the two laptops I have on this test fortilink VLAN are able to ping each other regardless of the access VLAN.Īfter the client traffic reaches the FortiGate, the FortiGate unit can then determine whether to allow various levels of access to the client by shifting the client's network VLAN as appropriate.' Clients can only communicate with the FortiGate unit.

Here's my config (FG-300D on FortiOS 6.0.

Fortinet vpn client access other vlans