NSE4 7.

2 Infrastructure

Módulo 01.04 Intro

LAB Interfaces y Static Route

Eduardo Aliaga
Revisar las interfaces

Network > Interfaces:

Editar “port1”
Verificar el objeto “firewall address” creado
FG # show firewall address "port1 address"
config firewall address
edit "port1 address"
set uuid 4e8ff81e-e874-51ed-3c32-77c9b127e105
set type interface-subnet
set subnet 172.16.1.1 255.255.255.0
set interface "port1"
next
end
Renombrar el “firewall address”
FG # config firewall address

FG (address) # rename "port1 address" to LAN-NETWORK

FG (address) # edit LAN-NETWORK

FG (LAN-NETWORK) # show
config firewall address
edit "LAN-NETWORK"
set uuid 4e8ff81e-e874-51ed-3c32-77c9b127e105
set type interface-subnet
set subnet 172.16.1.1 255.255.255.0
set interface "port1"
next
end

FG (LAN-NETWORK) # end
Editar “port2”
Crear “ifvlan22” con etiqueta vlan 22 y asignar a port2
Revisamos en consola todas FG # show system interface port1
config system interface
las interfaces creadas edit "port1"
set vdom "root"
set ip 172.16.1.1 255.255.255.0
set allowaccess ping
set type physical
set alias "LANport"
set device-identification enable
set lldp-transmission enable
set role lan
set snmp-index 1
next
end

FG # show system interface port2

config system interface
edit "port2"
set vdom "root"
set ip 192.168.2.1 255.255.255.0
set allowaccess ping
set type physical
set alias "WANport"
set lldp-reception enable
set role wan
set snmp-index 2
next
end

FG # show system interface ifvlan22

config system interface
edit "ifvlan22"
set vdom "root"
set ip 192.168.22.1 255.255.255.0
set allowaccess ping
set snmp-index 10
set interface "port2"
set vlanid 22
next
end
Verificar con ping FG # execute ping 172.16.1.10
PING 172.16.1.10 (172.16.1.10): 56 data bytes
64 bytes from 172.16.1.10: icmp_seq=0 ttl=64 time=0.8 ms
64 bytes from 172.16.1.10: icmp_seq=1 ttl=64 time=0.4 ms

--- 172.16.1.10 ping statistics ---

2 packets transmitted, 2 packets received, 0% packet loss
round-trip min/avg/max = 0.4/0.6/0.8 ms
Ping a los vecinos
es exitoso FG # execute ping 192.168.2.9
PING 192.168.2.9 (192.168.2.9): 56 data bytes
64 bytes from 192.168.2.9: icmp_seq=0 ttl=255 time=2.2 ms
64 bytes from 192.168.2.9: icmp_seq=1 ttl=255 time=2.2 ms

--- 192.168.2.9 ping statistics ---

2 packets transmitted, 2 packets received, 0% packet loss
round-trip min/avg/max = 2.2/2.2/2.2 ms

FG # execute ping 192.168.22.9

PING 192.168.22.9 (192.168.22.9): 56 data bytes
64 bytes from 192.168.22.9: icmp_seq=0 ttl=255 time=6.9 ms
64 bytes from 192.168.22.9: icmp_seq=1 ttl=255 time=1.9 ms

--- 192.168.22.9 ping statistics ---

2 packets transmitted, 2 packets received, 0% packet loss
round-trip min/avg/max = 1.9/4.4/6.9 ms

Ping al router 192.168.1.254 falla

porque Fortigate sólo tiene rutas FG # execute ping 192.168.1.254
conectadas y no tiene rutas PING 192.168.1.254 (192.168.1.254): 56 data bytes
sendto failed
estáticas sendto failed

--- 192.168.1.254 ping statistics ---

2 packets transmitted, 0 packets received, 100% packet loss
Ruta estática y DNS
Creamos la ruta estática con next hop 192.168.2.9
Network > Static Routes:

Los servers DNS ya están creados. Solo verificamos

Network > DNS

Verificar salida a internet
En la consola vemos la ruta estática que creamos. También la config DNS
FG # show router static
config router static
edit 1
set gateway 192.168.2.9
set device "port2"
next
end

FG # show system dns

config system dns
set primary 96.45.45.45
set secondary 96.45.46.46
end

El traceroute hacia 192.168.1.254 es exitoso. El ping hacia google también

FG # execute traceroute 192.168.1.254
traceroute to 192.168.1.254 (192.168.1.254), 32 hops max, 3 probe
packets per hop, 84 byte packets
1 192.168.2.9 2.494 ms 2.030 ms 2.406 ms
2 192.168.1.254 3.287 ms 0.862 ms 1.126 ms

FG # execute ping www.google.com

PING www.google.com (142.250.190.36): 56 data bytes
64 bytes from 142.250.190.36: icmp_seq=0 ttl=115 time=27.5 ms
64 bytes from 142.250.190.36: icmp_seq=1 ttl=115 time=25.9 ms

--- www.google.com ping statistics ---

2 packets transmitted, 2 packets received, 0% packet loss
round-trip min/avg/max = 25.9/26.7/27.5 ms