Knowledge Base
Latest
SD-WAN steering isn't one setting — it's an ordered pipeline. Walk it step by step: route lookup builds the candidate members, SD-WAN rules match the traffic, the SLA health-check filters to healthy members, and the strategy selects one. Then follow a single packet end to end on FortiGate, with the verify commands.
Read the guide →Your ISP links are the underlay, not the overlay — the overlay is the logical VPN you build across them, and SD-WAN is the decision layer on top. Separate the three, then organize FortiGate SD-WAN zones by interface role (overlay vs internet) instead of one zone per ISP. With ADVPN and a top-down troubleshooting hierarchy.
Read the guide →An IPv6 RA flood turns a host's CPU into a softirq queue that never empties — a denial of service. Use thc-ipv6 in a lab to reproduce it, then prove RA Guard on the switch filters it at the edge. Authorized testing only.
Read the guide →A short, end-to-end QoS test: mark iperf3 traffic with a DSCP value (ToS = DSCP × 4), have an Aruba AOS-CX switch trust DSCP and queue it, then prove it on the wire and in the switch queue counters.
Read the guide →Stop memorizing six numbers. Every OSPF LSA is written by one of four authors — Router, DR, ABR, ASBR — and the type just says who wrote it and what it describes. A fast, simple system with a mnemonic, a route-follow story, stub/NSSA rules, real show commands, and a 60-second drill.
Read the guide →FortiAnalyzer's logs, reports, incidents and device manager are all reachable over JSON-RPC. Meet an open, example-driven community map of its 106 endpoints — then make your first call: log in and reuse the session.
Read the guide →How IPv6 really works with no broadcast or ARP — multicast and ICMPv6 handle router discovery (RS/RA + SLAAC), neighbor discovery (NS/NA, DAD), and DHCPv6, with the Linux commands to watch it live.
Read the guide →Build a full certificate set from Linux with OpenSSL — private key, CSR, and cert (PEM/PKCS12) — then install the right files on a Linux server, a firewall, and a switch.
Read the guide →Manage SNMP MIBs the right way with net-snmp: install and enable base MIBs, organize vendor MIBs under version control, validate them with snmptranslate, query devices, and secure SNMP with v3.
Read the guide →Shell basics and environment-variable manipulation, then the CLI for networking, AWS and Azure — with credential-safety best practices and copy-ready examples.
Read the guide →A categorized command-line reference for network & security engineers — interfaces, DNS, sockets, packet capture, remote access, processes, permissions, firewall, and shell automation, with copy-ready examples.
Read the guide →Drive GitHub Actions, FortiManager and FortiGate from one REST client — how to authenticate and manage environments for each, plus a plugin to run a whole folder of requests at once.
Read the guide →Topics
More guides landing here as the base grows.
Routing, switching, VPN, SD-WAN.
Browse guides → LiveFortiGate, FortiManager, FortiAnalyzer, and more.
Browse guides → LiveTerraform, Ansible, Python, REST APIs, CI/CD.
Browse guides → LiveThe command line that runs the infrastructure.
Browse guides → LiveHardening, detection, incident response.
Browse guides →