ct/ct-noc-a8360-1-a.cfg Mon Nov 24 05:28:36 PM EST 2025

configs/ct/ct-noc-a8360-1-a.cfg

@@ -951,6 +951,7 @@ ip route 192.168.0.0/16 nullroute vrf outside
 ip route 192.168.46.0/24 10.251.1.5 vrf outside
 ip route 192.168.79.0/24 10.251.1.5 vrf outside
 ip route 192.168.146.0/24 10.251.1.5 vrf outside
+ip route 192.168.167.0/24 10.251.1.5 vrf outside
 ip dns domain-name scsd.ad
 ip dns server-address 10.1.40.10 vrf mgmt
 ip dns server-address 10.21.48.10 vrf mgmt

configs/fortigate/vdom_scsd/firewall.cfg

@@ -2894,6 +2894,10 @@ config firewall address
     edit "RAPpublic"
         set subnet 24.105.188.54 255.255.255.255
     next
+    edit "RAP-FW-Inside"
+        set allow-routing enable
+        set subnet 192.168.167.0 255.255.255.0
+    next
 end
 config firewall multicast-address
     edit "all_hosts"
@@ -6252,7 +6256,7 @@ config firewall policy
         set dstintf "RAP"
         set action accept
         set srcaddr "Server_40" "Server_48" "21JumpSt" "Sys-Net-Admins"
-        set dstaddr "RAP-Users" "RAP-MGMT"
+        set dstaddr "RAP-Users" "RAP-MGMT" "RAP-FW-Inside"
         set schedule "always"
         set service "ALL"
         set utm-status enable

configs/fortigate/vdom_scsd/router.cfg

@@ -234,6 +234,10 @@ config router static
         set device "RAP"
         set comment "RAP Users"
     next
+    edit 38
+        set dst 192.168.167.0 255.255.255.0
+        set device "RAP"
+    next
 end
 config router ospf
     config redistribute "connected"

configs/sh/sh-noc-a8360-3-a.cfg

@@ -1038,6 +1038,7 @@ ip route 192.168.0.0/16 nullroute vrf outside
 ip route 192.168.46.0/24 10.251.1.5 vrf outside
 ip route 192.168.67.0/24 10.251.1.5 vrf outside
 ip route 192.168.146.0/24 10.251.1.5 vrf outside
+ip route 192.168.167.0/24 10.251.1.5 vrf outside
 ip dns domain-name scsd.ad
 ip dns server-address 10.1.40.10 vrf mgmt
 ip dns server-address 10.21.48.10 vrf mgmt

configs/sh/sh-noc-a8360-3-b.cfg

@@ -1026,6 +1026,7 @@ ip route 192.168.0.0/16 nullroute vrf outside
 ip route 192.168.46.0/24 10.251.1.5 vrf outside
 ip route 192.168.79.0/24 10.251.1.5 vrf outside
 ip route 192.168.146.0/24 10.251.1.5 vrf outside
+ip route 192.168.167.0/24 10.251.1.5 vrf outside
 ip dns domain-name scsd.ad
 ip dns server-address 10.1.40.10 vrf mgmt
 ip dns server-address 10.21.48.10 vrf mgmt