u/renovatio522

If I want to assign all interfaces trunk port with native 1, do I simply assign all interfaces

Native VLAN 1
Allowed VLANs 1-4094?

What about the ‘internal’ interface?

We are thinking of doing slow migration testing moving from Meraki to FortiAPs by buildings. Can Meraki and FortiAPs coexist and share the same SSIDs and same security? Will devices be able to roam from one to the other?

How do you configure outdoor AP like FAP-432FR with omni antenna to cover certain area like directional antenna would without leaking signal into the buildings behind the AP creating sticky client situation?

I was wondering if anyone have any insights on this.

Let say we have the following scenario

School environment with one FAP241K AP per classroom

Mix of windows and mac laptop and Apple iPad devices

Need coverage redundancies in case one AP goes down

Encourage encourage clients to connect using 5Ghz instead of 2.4Ghz

Roaming without losing connections

What is a good transmit power dBm value to use for 5Ghz and 2.4Ghz?

Should these be settings turned on or off?

Frequency Handoff

AP Handoff

Channel Width

Protected Management Frames (802.11w)

Radio Measurements (802.11k)

BSS Transition Management (802.11v)

Fast BSS Transition (802.11r)

Really appreciate any response! Thank you!

All the sudden FortiAPs are getting "Association denied, max supported stations reached" message, where is this settings configured usually? APs are managed using FortiEdge Cloud. Only change was turned on "Enhanced Logging". Help!

We are currently bridging two network/buildings using FortiAP Mesh.

FortiSwitch1 -> FortiAP A mesh root -> FortiAP B mesh client -> FortiSwitch2 -> FortiAP C

This has worked for few weeks. For some strange reasons, recently the switch port on FortiSwitch1 where FortiAP A Mesh is connected to starts to go into discarding mode whenever the mesh is connected which cause the link to go down. If I bounce the FortiAP A switch port, it will be pingable for few seconds before it is not pingable again. It also goes into the none edge mode when it sees the other FortiSwitch.

FortiSwitch1 is the STP root with lower priority number.

If I disable the mesh SSID, then FortiAP A stays online and pingable.

What could be the cause of this issue?

We have 8 sites running fortigate with version 7.4 and 2 sites running fortigates with version 7.6. When creating ADOM, is it better to create 7.4 ADOM or 7.6 ADOM to import configurations from all sites? I assume configuration needs to be re-installed from FortiManager back to the Fortigate devices to validate configuration?

Could someone give me guidance how to consolidate policies and objects and create templates for 10 Fortigate sites connected via site to site vpn tunnels. One central location act as hub.. Currently all Fortigates are being managed with FortiManager. Currently each site is one policy. Where do I begin? What is the general path of consolidating? How to fall back if push configuration fails?

Does the 6 little antennas that came with FAP432FR needs to have the profile's "External Antenna" option turned on and gain specified?

Questions

1. Suppose I use a Fortinet account to create a Fortinet Organization. Does that account automatically become the root (master) account? Is the account itself considered part of the organization it created? If I then activate FortiEdge Cloud (US) using the same account, should I be able to create an IAM user that can access that same FortiEdge Cloud (US) instance? In my lab testing, this does not appear to be the case. When I log in using the IAM user, the FortiEdge Cloud (US) instance does not appear. The IAM user has been granted access to the root OU with FortiEdge Cloud Administrator permissions. It appears that the FortiEdge Cloud instance created by the root account is associated only with that root account, whereas IAM users only have access to resources that belong to the Fortinet Organization. Is my understanding correct?
2. It also appears that, within the organizational hierarchy, I must select an OU that has at least one member account assigned to it. Otherwise, the available actions are grayed out.
3. There seems be a concept of local or organization. For example PartnerRole in IAM seems to be local only access to MyAssets

Could someone please confirm whether my understanding is correct, or if there is a configuration step that I may have missed?

How do you configure Fortigate Fortilink interfaces so that FortiSwitches and FortiAPs use the same default vlan 1 subnet for management? Do you assign the ip and dhcp server on the fortilink interface or the _default.fortilink (_default) vlan?

What are some of the ways to prevent users from unplugging FortiAPs and plug in their own computer to jump VLANs? Could you provide instruction on how to do this? Thank you!

We have Fortigate 200F currently running firmware v7.2.13. FortiAP-831F shows up in FortiSwitch and try to configure but couldn't find FortiAP Profile for 831F in Fortigate. How do we go about fixing this?

Could someone give me examples of tasteful nsfw videos that are possible to generate from Grok Imagine?

I am working on a project where we must host based replication.
Using Veeam, how do you migrate 4 VMs in vSphere running in a Windows Failover Cluster mounting CSV using Windows iSCSI?
iSCSI data needs to be moved to new storage as well.

Let's say you have 6 ESXi hosts in a cluster with DRS turned on. 3 hosts have one set of portgroup security settings and the other 3 hosts have different portgroup security settings (Promiscuous mode, MAC address change, Forged transmits). Will DRS still be able to load balance or redistribute VMs among the hosts with the same settings?

Cannot get to HCX Connector GUI using port 443 or 9443

Already tried restarting HCX Connector VM.

However we can connect to it using vSphere web client plugin

This is running 4.11.0, we are trying to upgrade to a supported version.

What could be the cause of this issue?

We are currently using HCX to migrate VMs from on premise to Azure AVS. This was setup previously by another guy. We need to update HCX on both sides in order get support. What can we shutdown to prove that HCX while being upgraded won’t affect our regular connections to azure? Thanks in advance!

Currently migrating VMs from one cluster to another within the same vcenter. We noticed that on the new cluster, DRS not rebalancing after exiting maintenance mode. It is set to fully automated and max aggressive mode. What could be the cause of this?

What is the minimum permissions or roles required to migrate VMs from one cluster to another cluster using storage vmotion within the same vCenter? Permissions for Hosts and Clusters? Permissions for VMs and Templates? Datastores? Networks? Anything else needed? Thanks in advance!