วีดีโอ

នៅក្នុង​ Fortigate បង

Hi bro thanks for your questions. The most best practice for DMZ is that when we want to isolate the network in DMZ from our local network. Because DMZ zone normally for public to access in, example web servers, mail or proxy servers. Not only in fortigate but for general network design and implementation. I hope I answer to your question if you have any other questions pls let me know 🙏🏻

@@tankirivann Thank Bong 😍😍

@ thanks 🙏🏻

Hi bro thanks for your questions. ប្រើបានទាំងពីរ រឺក៏មួយសម្រាប់internet មួយទៀតសម្រាប់vpn អាស្រ័យលើការប្រើប្រាស់និងការdesign របស់IT infrastructure នៅក្នុងក្រុមហ៊ុន។ សំខាន់គឺយើងត្រូវការpublic ip addresses 🙏🏻

@@tankirivann បងអាចជួយធ្វើ វីឌីអូបង្ហាញ់បានអត់ អរគុណបង

Thank you 🙏🏻😊

Hi sis can your firewall access to internet? Maybe this video can help you How to configure GNS3 access to Internet th-cam.com/video/XvhA3DNxQ_I/w-d-xo.html if this is not the answer you looking for pls let me know, thanks for your feedback 🙏🏻

Thank you so much bro 🙏🏻😍

Hi bro thank you very much for your request. I put it in my to do list and try my best to making this topic ASAP. anyway the cisco L3 inter vlan routing is on the way uploading, thanks again bro.

Hi bro sorry for late reply, this my wifi ip address. basically you need to understand what is gateway for your network, we required gateway when we want to communicate to different network. I hope I answer to your question if you still have any others pls let me know. thank you for your question.

Thank you for your feedback, I will improve on it 🙏🏻

Thank you! You too bro🙏🏻

Hello bro, thank you for your feedback. I will improve with my new videos and hope to see you again 🙏🏻

Thank you 🙏🏻

Thank you brother 🙏🏻😍

Hi bro, actually I never have any experience with EVE-NG but based on my research it is capable. Maybe you can try to test by yourself, thank you for your comment and good luck 🙏🏻

hi bro thank you that always support my video, if no DHCP SVR, you can configure your cisco L3 as DHCP SVR directly to your vlan. I will make a video for this lap practice with real cisco switch that i just bought it, I hope to see you in my next video.

hi bro, 20 usd each so i think it is good to have a real devices for sharing to the beginner on cisco switch

Thank you bro, check out here my new video for this week th-cam.com/video/Fq_s4AUfhoE/w-d-xo.html

Thank you for your support 😊❤️🙏🏻

Thank you 🙏🏻

Hi bro thank you for your comment, between FG and Cisco L3 we need to do routing and it can be static or dynamic base on your network environment implementation. In my lab practice here we use static route. If you have any other questions pls let me know🙏🏻🙏🏻🙏🏻

​@@tankirivann Hello Hello, is it dynamic when set to trunk mode below? The internet works on L3(Vlan200), but the internet doesn't work on L2(Vlan20~100)'s computer. When using tracert on the PC of L2, it does not go to 192.168.10.3 > 192.168.10.1 but ..... 192.168.200.2. I've searched your videos a lot but couldn't find a solution. Do you have any recommendations for videos or solutions? * FG setting port12- vlan20(192.168.20.1)~200(192.168.200.2) create vlan20~200 to internet (NAT on) * L3 Setting vlan 200 name vlan200_L3 interface vlan 200 ip address 192.168.200.1 255.255.255.0 interface GigabitEthernet0/1 switchport trunk encapsulation dot1q switchport mode trunk switchport trunk allowed vlan 10,20,30,40,100,200 ip dhcp pool vlan200_L3 network 192.168.200.0 255.255.255.0 default-router 192.168.200.1 dns-server 8.8.8.8 ip routing ip route 0.0.0.0 0.0.0.0 192.168.200.2 vlan 20 name vlan20_2F interface vlan 20 ip address 192.168.20.1 255.255.255.0 interface GigabitEthernet0/2 switchport trunk encapsulation dot1q switchport mode trunk switchport trunk allowed vlan 20,100 ip dhcp pool VLAN20_2F network 192.168.20.0 255.255.255.0 default-router 192.168.20.1 dns-server 8.8.8.8 * L2 Setting configure terminal vlan 20 name vlan20_2F interface vlan 20 vlan 100 name vlan100_Tel interface GigabitEthernet0/1 switchport mode trunk switchport trunk allowed vlan 20,100 interface range GigabitEthernet0/2-48 switchport mode access switchport access vlan 20 switchport voice vlan 100

Thank you for your support and I hope this video can help you to learn more! 🙏🏻 see you in my next videos

Thank you so much for your support 🙏🏻 I will try my best to make a good topic and lab practice ASAP. I hope to see you in my next videos

Thank you for your support and sorry for the inconvenience load music, I will improve it🙏🏻

Thank you so much bro, I use GNS3 software simulator for the lab🙏🏻

Thank you so much bro 🙏🏻

Hi bro thanks for your questions, in this lab practice show in same network but in reality it can be different location like bank. So you have many offices in different places around the country for example.

Thank you, bong 😊

@@csrcomputerservice8867 🙏🏻

hi bro am real sorry for late reply, for network adapter you can configure it in gns3 directly or can add from vmware network adapter setting. maybe you can follow my video on minutes 03:07. I hope i answer to your question, if you still have any other question pls let me know, thank you for your support.

Hi bro maybe this video can help you, How to setup GNS3 and add FortiGate to LAB th-cam.com/video/HZ-mEdNWSRw/w-d-xo.html

hi bro am real sorry for late reply, for network adapter you can configure it in gns3 directly or can add from vmware network adapter setting. maybe you can follow my video on minutes 03:07. I hope i answer to your question, if you still have any other question pls let me know, thank you for your support.

Hi bro sorry for late reply, let me explain my experience regarding to Zabbix. We use it for monitoring our network devices such as switches, firewall, servers and storage, in case any network device down it help to alert our IT department to take action on time to reduce the downtime of operations. For clients PC or laptop if any issues occur the user will inform IT support or IT department immediately. Our concern on client PC or laptop is cybersecurity so we should have endpoint protection. I hope you have some ideas how to monitor and protect your company network. If you have any other questions pls feel free to ask me, thanks 🙏🏻

រាល់ថ្ងៃបងធ្វើសំណង់ទេ ហាលភ្លៀងហាលថ្ងៃកាត់ភក់អ្នកដឹងបានដឹង😁😎

Thank you 🙏🏻

Hi bro thank you for your feedback 🙏🏻

Hi bro thank you for your comment. You can specify vlan access port following your network environment.

😍😎😁

Thank you bro 🙏🏻

Hi bro sorry for late reply, yes I want to but I need to upgrade my computer hardware first. It requires a lot RAM for Cisco nexus in GNS3. Thank you for your request 🙏🏻

Hi bro sorry for late reply, we have a long holiday in Cambodia 🇰🇭 it is possible technically but I never have experience on this. Normally each vendors have its own controller product to manage their AP. Base on my research you must convert Cisco to autonomous mode in order to integrate with Mikrotik CAPsMAN. If I am wrong pls correct me on this topic, thank you for your good question 🙏🏻

@@tankirivann Thank you bro for your answer. Yes, but no unfortunately. I'va got a couple or AIR-CAP's and a couple of AIR-SAP's which stand for standalone (autonomous). None of them come under cotrol of CAPsMAM unfortunately, only get IP address from the Mikrotic's DHCP Server. Regarding your research - if you convert a CAP to SAP (autonomous), then the idea of cotrolling and sharing the configurations from a CAPsMAN (or Cisco's WLC) to access points instead of configuring each AP separately will disappear at all. Right now I am learning the abilities of AIR-SAP like dot1x authentication, mac authentication, radius server usage, as Cisco AIR-SAP has all of mentioned features. But will they work thru Mikrotik, is the question.

Thanks 🥰🙏🏻

Thank you so much bro 🙏🏻 I try my best to keep up with new videos lab practices.

Your welcome sir

@@sureshkumar-nr4zc 🙏🏻

Hi bro thank you so much for your question. Base on my lab here we use access port because we require only one vlan but you can configure it as trunk port if you connect with ESXI or other virtual host with many vlan requires. It depends on your network environment and requirements.

@@tankirivann Thanks for the reply and sorry for my bad explanation. port between fortigate and core switch if interface vlan is on core switch can we do trunk allow vlan all or allow only vlan 17 or just set ip to port or make it access port (as you did in lab)

@@เมลิซานก้า hi bro thank you for your feedback, everything is possible and can do. You need to know your network requirements then apply it to your environment. I hope you can learn more with another lab here Fortigate firewall integrate with DHCP Server th-cam.com/video/PcVgBMAO3UQ/w-d-xo.html

Hi bro thank you very much for your comment, actually I tested on GNS3 also not working. So I hope we find the solution for this issue 😊🙏🏻

Hi bro thank you so much for your comment, I never do documentation sorry I don’t have it. Next lab I will prepare some documents as well for sharing in case you want to have it. 🙏🏻

@@tankirivann yes thank you so much teacher

Hi bro thanks for your question, it is very similar in terms of creating dynamic vpn networks but has some different points. Which one should we use, it is depends on our existing network and requirements.

@@tankirivann oh thanks teacher

Hi bro thank you so much for your support, pls find the link in the video description for some material for the gns3 lab