{"id":706,"date":"2021-09-12T01:37:10","date_gmt":"2021-09-12T01:37:10","guid":{"rendered":"https:\/\/rudecloud.site\/?p=706"},"modified":"2025-10-23T04:52:53","modified_gmt":"2025-10-23T04:52:53","slug":"vlan-on-fortigate-firewall","status":"publish","type":"post","link":"https:\/\/www.rudecloud.web.id\/index.php\/2021\/09\/12\/vlan-on-fortigate-firewall\/","title":{"rendered":"VLAN ON FORTIGATE FIREWALL"},"content":{"rendered":"\r\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"895\" height=\"625\" class=\"wp-image-752\" src=\"https:\/\/rudecloud.site\/wp-content\/uploads\/2021\/09\/12-1.png\" alt=\"\" srcset=\"https:\/\/www.rudecloud.web.id\/wp-content\/uploads\/2021\/09\/12-1.png 895w, https:\/\/www.rudecloud.web.id\/wp-content\/uploads\/2021\/09\/12-1-300x209.png 300w, https:\/\/www.rudecloud.web.id\/wp-content\/uploads\/2021\/09\/12-1-768x536.png 768w\" sizes=\"auto, (max-width: 895px) 100vw, 895px\" \/><\/figure>\r\n\r\n\r\n\r\n<p>baru ngoprek fortigate nih, salah satu network security yang bagus dan ternama juga, yaitu berasal dari provider keamanan firewall yaitu fortinet, fortiGate enterprise ini terdapat beberapa keunggulan yaitu, memberikan solusi pengurangan kompleksitas dan peningkatan keamanan jaringan secara keseluruhan melalui visibilitas penuh ke aplikasi, perangkat, pengguna serta ancaman pada jaringan. jadi sangat penting firewall untuk berbagai macam keamanan seperti di kantor, perusahaan, cloud maupun data center, selebihnya bisa baca baca di google, perusahaan apa fortinet dan salah satu produknya fortigate enterprise.<\/p>\r\n\r\n\r\n\r\n<p>pembahasan kali ini saya mau ngoprek salah satu fitur di fortigate yaitu vlan , seperti topologi di atas<\/p>\r\n\r\n\r\n\r\n<pre class=\"wp-block-code\"><code>\/\/Masuk ke console dan setting ip untuk tampilan GUI karena disini saya menggunakan  cloud sebagai akses fortigate\r\n\r\nFortiGate-VM64-KVM # config system interface\r\nFortiGate-VM64-KVM (interface) # edit port1\r\nFortiGate-VM64-KVM (port10) # set mode static\r\nFortiGate-VM64-KVM (port10) # set ip `192.168.203.10\/24\r\nFortiGate-VM64-KVM (port10) # set allowaccess https http ssh<\/code><\/pre>\r\n\r\n\r\n\r\n<p>Tampilan awal fortigate, masuk dengan user : admin passwordnya di kosongkan saja, selebihnya settingan kita lewat GUI saja, belum terlalu explore tentang syntaknya<\/p>\r\n\r\n\r\n\r\n\r\n\r\n<p>Setting Vlan, lakukan hal yang sama untuk vlan 20 dan 30. dibedakan ipaddress saja untuk port karena port yang mengarah ke switch di port2, bisa klik Network -&gt; Interface -&gt; Create new -&gt; Interface<\/p>\r\n\r\n\r\n\r\n\r\n\r\n<p>Jadinya akan seperti ini terdapat beberapa vlan di port 2<\/p>\r\n\r\n\r\n\r\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"378\" class=\"wp-image-714\" src=\"https:\/\/rudecloud.site\/wp-content\/uploads\/2021\/09\/3-1-1024x378.png\" alt=\"\" srcset=\"https:\/\/www.rudecloud.web.id\/wp-content\/uploads\/2021\/09\/3-1-1024x378.png 1024w, https:\/\/www.rudecloud.web.id\/wp-content\/uploads\/2021\/09\/3-1-300x111.png 300w, https:\/\/www.rudecloud.web.id\/wp-content\/uploads\/2021\/09\/3-1-768x283.png 768w, https:\/\/www.rudecloud.web.id\/wp-content\/uploads\/2021\/09\/3-1-1536x567.png 1536w, https:\/\/www.rudecloud.web.id\/wp-content\/uploads\/2021\/09\/3-1.png 1634w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\r\n\r\n\r\n\r\n<p>Selanjutnya membuat Zone, zone disini menentukan zona mana yang local, dmz maupun Wan, bisa kita kelompokan jika yang mengarah ke local ada beberapa ip ataupun interfacenya, klik Network -&gt; Interface -&gt; Create New -&gt; Zone<\/p>\r\n\r\n\r\n\r\n<figure class=\"wp-block-image size-large is-resized\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-715\" src=\"https:\/\/rudecloud.site\/wp-content\/uploads\/2021\/09\/4-1024x533.png\" alt=\"\" width=\"1020\" height=\"531\" srcset=\"https:\/\/www.rudecloud.web.id\/wp-content\/uploads\/2021\/09\/4-1024x533.png 1024w, https:\/\/www.rudecloud.web.id\/wp-content\/uploads\/2021\/09\/4-300x156.png 300w, https:\/\/www.rudecloud.web.id\/wp-content\/uploads\/2021\/09\/4-768x400.png 768w, https:\/\/www.rudecloud.web.id\/wp-content\/uploads\/2021\/09\/4-1536x800.png 1536w, https:\/\/www.rudecloud.web.id\/wp-content\/uploads\/2021\/09\/4.png 1638w\" sizes=\"auto, (max-width: 1020px) 100vw, 1020px\" \/><\/figure>\r\n\r\n\r\n\r\n<p>Selanjutnya setting internetnya, disini fortigate terhubung dengan NAT di port 10, dan menggunakan DHCP CLIENT, klik saja pada interface port10 lalu klik Edit,<\/p>\r\n\r\n\r\n\r\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"529\" class=\"wp-image-716\" src=\"https:\/\/rudecloud.site\/wp-content\/uploads\/2021\/09\/10-1024x529.png\" alt=\"\" srcset=\"https:\/\/www.rudecloud.web.id\/wp-content\/uploads\/2021\/09\/10-1024x529.png 1024w, https:\/\/www.rudecloud.web.id\/wp-content\/uploads\/2021\/09\/10-300x155.png 300w, https:\/\/www.rudecloud.web.id\/wp-content\/uploads\/2021\/09\/10-768x396.png 768w, https:\/\/www.rudecloud.web.id\/wp-content\/uploads\/2021\/09\/10-1536x793.png 1536w, https:\/\/www.rudecloud.web.id\/wp-content\/uploads\/2021\/09\/10.png 1670w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\r\n\r\n\r\n\r\n<p>Terdapat rule tambahan nih, yaitu policy atau aturan dalam jalur paket yang di inginkan, klik policy &amp; object -&gt; IPV4 Policy -&gt; name isikan bebas, incoming pilih local yang tadi sudah di buatkan, outgoing mengarah ke port WAN, selebihnya aturanya disini kita pilih allow semua, untuk lebih aman lagi, kita bisa mengizinkan hanya beberapa service saja<\/p>\r\n\r\n\r\n\r\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"460\" class=\"wp-image-718\" src=\"https:\/\/rudecloud.site\/wp-content\/uploads\/2021\/09\/11-1024x460.png\" alt=\"\" srcset=\"https:\/\/www.rudecloud.web.id\/wp-content\/uploads\/2021\/09\/11-1024x460.png 1024w, https:\/\/www.rudecloud.web.id\/wp-content\/uploads\/2021\/09\/11-300x135.png 300w, https:\/\/www.rudecloud.web.id\/wp-content\/uploads\/2021\/09\/11-768x345.png 768w, https:\/\/www.rudecloud.web.id\/wp-content\/uploads\/2021\/09\/11-1536x690.png 1536w, https:\/\/www.rudecloud.web.id\/wp-content\/uploads\/2021\/09\/11.png 1919w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\r\n\r\n\r\n\r\n<p>Setting Switch, disini saya menggunakan Switch Cisco<\/p>\r\n\r\n\r\n\r\n<pre class=\"wp-block-code\"><code>IOU1#vlan database\r\n% Warning: It is recommended to configure VLAN from config mode,\r\n  as VLAN database mode is being deprecated. Please consult user\r\n  documentation for configuring VTP\/VLAN in config mode.\r\n\r\nIOU1(vlan)#vlan 10 name tamu\r\nVLAN 10 added:\r\n    Name: tamu\r\nIOU1(vlan)#vlan 20 name ruangguru\r\nVLAN 20 added:\r\n    Name: ruangguru\r\nIOU1(vlan)#vlan 30 name ruangTU\r\nVLAN 30 added:\r\n    Name: ruangTU\r\nIOU1(vlan)#exit\r\nAPPLY completed.\r\nExiting....\r\nIOU1#configure terminal\r\nEnter configuration commands, one per line.  End with CNTL\/Z.\r\n\r\nIOU1(config)#interface ethernet 0\/1\r\nIOU1(config-if)#switchport mode access\r\nIOU1(config-if)#switchport access vlan 10\r\nIOU1(config-if)#exit\r\n\r\nIOU1(config)#int ethernet 0\/0\r\nIOU1(config-if)#switchport mode trunk\r\nIOU1(config-if)#switchport trunk encapsulation dot1q\r\nIOU1(config-if)#exit\r\n\r\nIOU1(config)#interface ethernet 0\/2\r\nIOU1(config-if)#switchport mode access\r\nIOU1(config-if)#switchport access vlan 20\r\nIOU1(config-if)#exit\r\n\r\nIOU1(config)#interface ethernet 0\/3\r\nIOU1(config-if)#switchport mode access\r\nIOU1(config-if)#switchport access vlan 30<\/code><\/pre>\r\n\r\n\r\n\r\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"545\" height=\"232\" class=\"wp-image-720\" src=\"https:\/\/rudecloud.site\/wp-content\/uploads\/2021\/09\/5.png\" alt=\"\" srcset=\"https:\/\/www.rudecloud.web.id\/wp-content\/uploads\/2021\/09\/5.png 545w, https:\/\/www.rudecloud.web.id\/wp-content\/uploads\/2021\/09\/5-300x128.png 300w\" sizes=\"auto, (max-width: 545px) 100vw, 545px\" \/><\/figure>\r\n\r\n\r\n\r\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"551\" height=\"301\" class=\"wp-image-721\" src=\"https:\/\/rudecloud.site\/wp-content\/uploads\/2021\/09\/6.png\" alt=\"\" srcset=\"https:\/\/www.rudecloud.web.id\/wp-content\/uploads\/2021\/09\/6.png 551w, https:\/\/www.rudecloud.web.id\/wp-content\/uploads\/2021\/09\/6-300x164.png 300w\" sizes=\"auto, (max-width: 551px) 100vw, 551px\" \/>\r\n<figcaption>Kita test menggunakan salah satu pc dengan Dhcp client<\/figcaption>\r\n<\/figure>\r\n\r\n\r\n\r\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"696\" height=\"542\" class=\"wp-image-722\" src=\"https:\/\/rudecloud.site\/wp-content\/uploads\/2021\/09\/9.png\" alt=\"\" srcset=\"https:\/\/www.rudecloud.web.id\/wp-content\/uploads\/2021\/09\/9.png 696w, https:\/\/www.rudecloud.web.id\/wp-content\/uploads\/2021\/09\/9-300x234.png 300w\" sizes=\"auto, (max-width: 696px) 100vw, 696px\" \/><\/figure>\r\n","protected":false},"excerpt":{"rendered":"<p>baru ngoprek fortigate nih, salah satu network security yang bagus dan ternama juga, yaitu berasal dari provider keamanan firewall yaitu fortinet, fortiGate enterprise ini terdapat beberapa keunggulan yaitu, memberikan solusi pengurangan kompleksitas dan peningkatan keamanan jaringan secara keseluruhan melalui visibilitas penuh ke aplikasi, perangkat, pengguna serta ancaman pada jaringan. jadi sangat penting firewall untuk berbagai &hellip; <\/p>\n","protected":false},"author":1,"featured_media":710,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[71],"tags":[75,83,63,74],"class_list":["post-706","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-fortigate","tag-fortinet","tag-ipv4","tag-network","tag-vlan"],"_links":{"self":[{"href":"https:\/\/www.rudecloud.web.id\/index.php\/wp-json\/wp\/v2\/posts\/706","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.rudecloud.web.id\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.rudecloud.web.id\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.rudecloud.web.id\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.rudecloud.web.id\/index.php\/wp-json\/wp\/v2\/comments?post=706"}],"version-history":[{"count":9,"href":"https:\/\/www.rudecloud.web.id\/index.php\/wp-json\/wp\/v2\/posts\/706\/revisions"}],"predecessor-version":[{"id":1089,"href":"https:\/\/www.rudecloud.web.id\/index.php\/wp-json\/wp\/v2\/posts\/706\/revisions\/1089"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.rudecloud.web.id\/index.php\/wp-json\/wp\/v2\/media\/710"}],"wp:attachment":[{"href":"https:\/\/www.rudecloud.web.id\/index.php\/wp-json\/wp\/v2\/media?parent=706"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.rudecloud.web.id\/index.php\/wp-json\/wp\/v2\/categories?post=706"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.rudecloud.web.id\/index.php\/wp-json\/wp\/v2\/tags?post=706"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}