There's a feature of FortiSwitch called 'Access VLAN' (I think they changed the name from a previous version, but that's what they call it now). 'Access VLANs are VLANs that aggregate client traffic solely to the FortiGate unit. Enable Two-Factor Authentication (2FA)/MFA for Fortinet Fortigate Client to extend security level. This prevents direct client-to-client traffic visibility at the layer-2 VLAN layer. They requested an IPSec VPN to access via the FortiClient. The use case is as such: PLC vendor needs access to specific VLAN on our network so they can remotely manage their systems. Click on Customization in the left menu of the dashboard. FortiClient IPSec VPN to VLAN Hi All, I'm tired of beating my head against this wall and am hoping one of you may have a sledgehammer or wrecking ball I can borrow. In Basic Settings, set the Organization Name as the customdomain name.

Has anyone successfully used this feature? Huge thanks in advance! I'm testing this feature on a lab and, for the life of me, the two laptops I have on this test fortilink VLAN are able to ping each other regardless of the access VLAN.Īfter the client traffic reaches the FortiGate, the FortiGate unit can then determine whether to allow various levels of access to the client by shifting the client's network VLAN as appropriate.' Clients can only communicate with the FortiGate unit. Here's my config (FG-300D on FortiOS 6.0.

Fortinet vpn client access other vlans