Full Fortinet Setup & Walkthrough **For Beginners** | SD-WAN | VLAN | Wi-Fi

Full Fortinet Setup & Walkthrough For Beginners | SD-WAN | VLAN | Wi-Fi | Testing & More

Рет қаралды 71,230

Күн бұрын

I'm Keith Barker, a 2x CCIE (Cisco Certified Internetwork Expert).
In this video you'll learn the entire first time setup of a Fortinet system. This is an in-depth overview of initial setup for beginners or anyone who is looking for a concise overview of the entire Fortinet stack. We will walk through each step individually including a factory reset of all the hardware. Then we will start the entire configuration from scratch by setting up IP Addresses, an SD-WAN zone, and configuring the FortiSwitches. We will also walk through setting up VLANs, FortiSwitches, FortiAPs (access points), Wi-Fi, permissions, NAT, and SD-Wan Rules ( and SLA targets). If you want to know the basics of setting up this whole system, you've come to the right place!
I'm am your guy if you are:
👉 New to IT and don't know where to start
👉Currently in IT, and want to learn more advanced ideas
👉 Anyone who wants to learn about the basics of technology in general
I believe that anyone can improve their situation by gaining new skills, especially in information technology.
🆓 Free Packet Tracer Labs download: thekeithbarker.com
🦘 Jump links:
00:00 ⏩ Intro
00:27 ⏩Topology
03:27 ⏩Game Plan and Overview
07:14 ⏩Factory Reset
07:43 ⏩IP Addresses
09:46 ⏩SD-WAN Zone
12:69 ⏩Add FortiSwitches
14:48 ⏩Creating VLANs
19:15 ⏩Access Points and Wifi Net
23:25 ⏩Permissions and NAT
26:48 ⏩SD-WAN Rules (SLA)
31:05 ⏩Testing and Verification
Enjoy, Like, and Subscribe. 😃
Free KZfaq Playlists from Keith:
▶ Cisco CCNA 200-301 ogit.online/sloth
🔐 Cisco CCNA 200-301 Security ogit.online/200-301_Security
💻 Cisco CCNA 200-301 IPv4 Subnetting ogit.online/subnet
💬 Join our Discord server (free) ogit.online/Join_OGIT_on_Discord
🏪 Keith Barker Amazon Affiliate Store www.amazon.com/shop/keithbarker
🏫 Keith’s Content at CBT Nuggets ogit.online/Keith-CBT

Пікірлер: 108

@Clovistered Жыл бұрын

Without a doubt one of the best Teachers that has ever done it, period. I am so thankful

@jonathanbanda3981 Жыл бұрын

I second!

@enekupelelevaga3466 Жыл бұрын

@@jonathanbanda3981 I third

@zoltron30 3 күн бұрын

Oh yeah I agree. Keith hands down is the best teacher with his humor as well. Still love going over his Ipv6 videos.

@JasonsLabVideos Жыл бұрын

I love how clean the Fortinet GUI looks, so easy to follow & it just flows properly !

@olugbengaodeyemi6966 Ай бұрын

Thank you, Keith. This is very informative and helpful. God bless you and increase you on every side (Amen)

@benpeck5623 Жыл бұрын

I highly recommend any of Keith's videos and courses. He is a rare breed of trainer because he actually has a plan, builds a real usable scenario lab, configures it (hits the save button!), and then tests and verifies it. Hugely important for those trying to learn and practice anything. Unfortunately in my experience most IT training videos (and even the expensive official trainings provided by vendors) don't do this. Most trainers (and even some others at CBT Nuggets - Meraki trainings - ahem) think it's good enough to walk through GUIs, point and talk about what does what, maybe punch in some bogus settings for on-the-spot hypothetical scenarios, and then not even save them! Or if they do, it's a trivial, silly example, and when you try it, you find out their descriptions were incomplete and insufficient. That being said, now I have to figure out how the Fortigate 60F suddenly became virtual one in eve-ng at the end :)

@kzukijn Жыл бұрын

Been waiting for someone who could explain fortigate better than all that I did scourging from youtube and google and this is the best tutorial. Thank you so much!

@yacyasma9293 Жыл бұрын

it's been really a long time since last time, good to hear you a gain

@bytes86 Жыл бұрын

Thanks, Keith, awesome video! love your Fortinet videos, please share more!

@rajendramisir3530 Жыл бұрын

Good to see you Keith! Thanks for sharing this Fortinet video. You did a fantastic job. Configuration of outgoing traffic through the Fortigate SD-WAN firewall is cool. Configuration of incoming traffic from the Internet through the Fortigate SD-WAN will be interesting to see.

@brandonmarcum Жыл бұрын

I can definitely see where Fortinet's use of the term "Native VLAN" can trip people up. This was a very helpful overview, Keith. Thank you!

@NetworkNinja111 Жыл бұрын

Always amazing content Keith!!! You the GOAT of IT 🐐🐐🐐

@leothalion3983 Жыл бұрын

This was awesome! Thank you, Keith!!!

@zsolovyev Жыл бұрын

Keith, thank you for the very informative video! I have been learning Cisco from you before your CBT times ;)

@nioinsane Жыл бұрын

Thanks for sharing your knowledge Keith. Greetings

@abdultayeb-rw7yj Жыл бұрын

looks younger than before thank you for showing up!!

@StefanoAgrotis Жыл бұрын

Wow. I can't express enough how helpful this video was.

@KeithBarker Жыл бұрын

Happy to do it, thanks for the feedback Stefano Agrotis.

@GodwillhandleIT Ай бұрын

Very impressive, you explained everything very quickly and concise. 10/10

@rockinron5113 Жыл бұрын

Nice one Keith. Very informative. Cheers.

@snottypockets Жыл бұрын

Oh wow, having the Cisco training by watching your training videos, I"m very impressed with what Fortigate can do thanks Keith from Australia.

@rodriro3 Жыл бұрын

Hey Keith, This is a great video since I use Fortinet with the MSP I’m with at most of clients.

@PopgoestheWiesle Жыл бұрын

Very informative. I wish had something like this when I first started managing fortigates.

@marcusgabrielsson6588 Жыл бұрын

Where was Keith Barker when I first started managing Fortigates? Thank you for this!

@AmeyaKhandekar28 Ай бұрын

This video is hugely helpful! Thank you

@Michael-er8dh Жыл бұрын

I have done ccna and ccnp using your course on cbt then landed a job supporting fortinet devices, I am really lucky that you are also teaching fortinet courses, Thank you Keith!

@markgilgorobat5296 Жыл бұрын

You're really amazing Keith! Thanks for sharing this video.

@KeithBarker Жыл бұрын

My pleasure!

@ChrisOsborntech Жыл бұрын

This video was so very helpful, as well as all of them. I am working on a project that’s related, and this may be the answers I needed.

@KeithBarker Жыл бұрын

Happy to do it, thanks for the feedback Chris Osborn.

@mahmoudyousuf1560 Жыл бұрын

Thanks ^__^ The king of OG

@TheCodesterr Жыл бұрын

Great walk through!

@TheElevenBravo 5 ай бұрын

Simply amazing video! Thank you so much!

@KeithBarker 4 ай бұрын

Thank you @TheElevenBravo!

@TastyChickenLegs Жыл бұрын

Outstanding content. Thank you very much. Well done.

@KeithBarker Жыл бұрын

Thank you TastyChickenLegs!

@oscarettoleite Жыл бұрын

My favourite school teacher 😍

@riccardoblue2781 Жыл бұрын

You are the BEST.

@belikemike7646 9 ай бұрын

Great information and instruction, thank you!

@KeithBarker 8 ай бұрын

Thank you @belikemike7646!

@AZNetworks Жыл бұрын

If I ever stuck on any topic Keith is my teacher and I am so thankful that we have you Boss

@KeithBarker Жыл бұрын

Thank you AZ Networks!

@tamoorali5768 8 ай бұрын

he is a good teacher as i see as a begineer

@nathanany6839 Жыл бұрын

Just wanted you thank you mr. Barker. I have learned so much from your videos and I have finally broken into the IT sector. thanks

@KeithBarker Жыл бұрын

Glad to help

@jamess1520 Жыл бұрын

Tons of value, thanks

@KeithBarker Жыл бұрын

Happy to do it, thanks for the feedback james s.

@mabrouk642 Жыл бұрын

This guy is a legend!

@KeithBarker Жыл бұрын

Thank you Mabrouk!

@lowellguzman7249 Жыл бұрын

Awesome!

@rpinto8800 Жыл бұрын

Thank you, more videos on Fortigate fw please

@freshgino Жыл бұрын

Oh man I wish you could make this same video for Sophos or Mikrotik!

@GinSabre 9 ай бұрын

This is very helpful. Still struggling with setting up sd-wan on my ipsec tunnels for reduandancy

@redouanerochdy1029 2 ай бұрын

Outstanding ! The best I’ve seen so far! Are the fortiswitches configured in eve-ng ?

@josephgambai319 Жыл бұрын

Please Keith I need you to do more of this Fortigate tutorials please 🙏❤️.

@glenntembo2693 Жыл бұрын

IT Original Gangster -Thanks Keith

@KeithBarker Жыл бұрын

Thank you Glenn Tembo!

@khaledkandil4765 10 ай бұрын

Hi Keith, very impressive video keep up the good work. i just wanted to ask about the EVE-NG is this the professional edition, it is the first time i see quality config, i realy learn new things each time i see your videos. thanks once more

@ziadurrani4751 10 ай бұрын

Keith, thank you for this amazing video. Question, I purchased a FortiGate 60F, FortiSwitch 108F POE and AP. Can I setup your lab without a Fortinet license or it's required?

@mrd4233 Жыл бұрын

Thanks Keith for mentioning that Fortinet Access Ports names it "Native Vlan" and Cisco uses it for untagged traffic between trunks. WTF with different vendor names and uses :D

@Kensingtonhawk Жыл бұрын

Hi Keith, Could you please make a video showcasing the roadmap for someone who want to become an expert in cybersecurity by self learning using learning arsenal's like cbtnuggets, instead of enrolling in a university. Perhaps a roadmap of certificate's one should focus on step by step to become xyz in a cybersecurity niche. I am currently doing the comptia A+ with you in cbtnuggets and I just love the way you teach, however, I am not sure which certificate to focus on after this since there's so many varieties and I am complete novice in this field (trying to change my career from nursing to cybersecurity). Kind regards, Jay

@BlesmatM Жыл бұрын

I like this guy and his brothers anthony S and kevin W., I have been out IT for about 3 years, I am back to continue my dreams to get a CCNP, please God, may You guide me

@Sabs761010 Ай бұрын

Hi @fortinet guru, thanks for the brilliant explication, i have a question in my job we connect through forticlient app which point to a fqdn name instead to ip address,so how does is it configured that on the fortigate firewall? Thanks in advance.

@fbifido2 Жыл бұрын

can the HA port on a FortiGate firewall be use as WAN ports ???

@pppam Жыл бұрын

Keith, is there any possibility to see you creating video tutorials for Huawei equipment? I encounter this manufacturer in an increasing number of customers.

@KeithBarker Жыл бұрын

I don't know that product, sorry.

@brianbisono3203 Жыл бұрын

I like your tutorial. There is one question I want to ask, what is the usage of DHCP range in Vlan 5?

@KeithBarker Жыл бұрын

To provide an IP address to the APs. They get their IP address via DHCP.

@sreejithjinachandran7322 10 ай бұрын

Hello Sir, When the rules processing is that processing based on # number not Policy ID number right?

@akellavenkatasrinivas494 11 ай бұрын

Keith i need data center design and configuration videos. Can u help me where can i get them

@fbifido2 Жыл бұрын

How would you setup 2 switch to connect to the FW, so that if one switch failed the other switch will allow the users to still have internet access ???

@KeithBarker Жыл бұрын

Use 2 physical Ethernet interfaces for the FortiLink interface. Connect 1 Ethernet to a switch on the top of the rack, connect the other Ethernet to the bottom switch, and that is how you can get fault tolerance.

@SmartCertificate 10 ай бұрын

👍

@Photoshopuzr 3 ай бұрын

im in the works right now on getting me a hwfirewall and im choosing f40 its only me on my network, ill be streaming my own plex server, nas, and cameras, I may have a few family members on it id say a max of 20 people with a few smart devices, tv, ipads, smart home appliances as well. Do you guys thing thats enough or should I should be looking at 40f ,80f or the 100f?

@KeithBarker 3 ай бұрын

Thank you for the question @Photoshopuzr. As far a throughput goes, the lower models will be fine, based on your expected number of users and their traffic.

@Photoshopuzr 3 ай бұрын

thanks for the reply I appreciate it.@@KeithBarker

@leejonscramstad3216 8 ай бұрын

Hey Keith, how do I allow inter VLAN traffic? So a printer on VLAN 10 can be seen by laptop in VLAN 20.

@KeithBarker 8 ай бұрын

Thank you for the question @leejonscramstad3216. Because the FortiGate is logically connected to all those VLANs (as the manager of the switch stack) it has routes to the subnets associated with the VLANs.

@OmarZeRoo Жыл бұрын

so do you have a port channel going to each switch or is it a port channel going to one switch that is stacked with another switch? I am kind of confused

@KeithBarker Жыл бұрын

Thank you for the question Omar M.. For the connections between the FortiGate and the first switch, if FortiLink split interface is disabled, will automatically make a LAG. For the connections between a switch and another switch (both FortiSwitch), they will also automatically make a LAG. Hope that helps, and best wishes.

@fbifido2 Жыл бұрын

@31:57 - how to load balance the two wan ports or isp ??

@KeithBarker Жыл бұрын

As part of the SD-WAN zone configuration and rules, that will allow you to load balance.

@danimoosakhan 2 ай бұрын

You didn’t show us how you form a LAG between SW1 and SW2. Does Fortilink forms LAG automatically between switches and Fortigates? Also what about SW1 side of LAG that is connected to upstream Fortigate?

@KeithBarker 2 ай бұрын

Thank you for the question @danimoosakhan. Yes, the LAG is automatically formed between the switches. If you want to use LAG between the FGT and a single switch, disable the FortiLink split interface option. With that option on, it will only use 1 of the 2 interfaces to avoid a loop.

@yawnyame981 Жыл бұрын

Hi Keith, pls what type of Linux virtual machine were you using in ESXI in your fortinet firewall training? I don't mean tiny core but the one with the name "keith@virtual-machine"

@KeithBarker Жыл бұрын

Mint Linux

@yawnyame981 Жыл бұрын

@@KeithBarker Thank Keith (The OG of IT)

@joejoe2452 Жыл бұрын

Is this going to be a complete series for fortinet NSE4?

@KeithBarker Жыл бұрын

Thank you for the question Joe Joe. Not a full series, just a video or two to help people understand how to configure the gear from FortiNet.

@muqthiarahmed Жыл бұрын

Hey Keith.. just wanted to check why did you stop weekend quize ?

@KeithBarker Жыл бұрын

Thank you for the question Muqthiar Ahmed. Yes, I have covered almost every single topic in the blueprint through both videos and quizzes, so I stopped as they would have become redundant.

@muqthiarahmed Жыл бұрын

@@KeithBarker thanks much Keith for your response ❤️ at least can we have discord session once in a while 🙂

@jurajvantuch9636 Жыл бұрын

Hello, i am little bit confused about links between FG, SW1 and SW2....you put it to VLAN10, but this interfaces should be trunk or not? Maybe I am wrong, but for me is it little strange. Thank a lot for reply.

@KeithBarker Жыл бұрын

Thank you for the question Juraj Vantúch. I set up a few access ports on SW1, to support clients that will be connected to VLAN 10.

@jurajvantuch9636 Жыл бұрын

@@KeithBarker So link between switches and Fgate was trunk? :)

@KeithBarker Жыл бұрын

@@jurajvantuch9636 It absolutely is. The 802.1Q trunking is negotiated and setup automatically between the FortiGate as the controller and the FortiSwitch stack.

@Oxobis61 11 ай бұрын

*The admin account has been deleted or renamed. I cannot reset the password because I do not know the name of the current account. how do i solve it.* ..i

@castle4757 Жыл бұрын

hey can i get fortinet switch vm images from somewhere?

@jcnash02 Жыл бұрын

Fortinet sells them

@bigkeoni6429 Жыл бұрын

Where can I get your full course on FortiGate?

@KeithBarker Жыл бұрын

CBTNuggets.com

@bigkeoni6429 Жыл бұрын

@@KeithBarker Yessir - I just enrolled and I am on slate to take my CCNP ENCOR and NSE4/5 this year - super excited and your breakdown is amazing.

@hudsonatlantis6754 Жыл бұрын

Better off using HPE switches over the Fortinet switches

@JoeyGarcia Жыл бұрын

I switched from HPE to Fortinet just for ease of management through one interface. HPE switches are very good though. We ran HP ProCurve switches (then HP Aruba) for 13 years without problems. I do love HPE switches because the cost and stability. Also, I was very comfortable with their command line interface. I'm crossing my fingers that these FortiSwitches will be as good. I do admit, they are a breeze to manage through the FortiGate. That's how Fortinet gets you. The FortiGate is the gateway drug (no pun intended) to the rest of their eco-system.