Help with Configuration between ISP ---> Fortigate ---> Mikrotick --> LAN

RouterOS General
1

Hello please i need help with configuration of my fortigate firewall to mikrotik router then to LAN switch ,

The initial configuration is ISP —> Mikrotick → LAN and everything works fines
on the Mikrotik the ISP Terminated with PPPoE


but as we are trying to up grade and add fortigate firewall which to be directed connect to the ISP using same PPoE , we create a firewall policy to allow the traffic from the LAN to the WAN port but the packets keep doping

i want someone to help me and getting it work please

2

Which device drops packets?
What is Fortigate supposed to do?
What do you need Mikrotik for if you insert Fortigate “in front” of it?

3

The Fortigates that drops the packets,

The fortigate should act as a firewall between the router and the ISP


The mikrotik will be handling internal routing and also routes to the internet

4

Why bother with the Mikrotik ? Fortinet can do the PPPoE to your ISP just fine and is a much more advanced solution then any Mikrotik when it comes to security.

5

When i terminate the PPPoE on the Fortigate firewall on (WAN x port ) , a station that is connected directly to the Firewall(port x ) is not able to go the internet , despite the fact that i created a policy to allow any from the (Port x) to (WAN x Port ) , i also added the (WAN x Port ) to the SD-WAN Group ,


The error is saying that x.x.x.85 (the ISP Gateway (Remote address)) is unrecheable.

6

You should discuss the problem on the Fortigate forum but why do you expect that anything could reach Internet if PPPoE session is dropped?
Is Fortigate just a firewall or a “full router”. You should rethink your configuration.