Technical Tip: How to find the IP address assigned to the IPsec remote dialup user

Unlike SSL VPN, the FortiOS GUI does not show the IP address assigned to the Remote IPsec user.

To find the tunnel Address, follow these steps.

1. Go to Dashboard -> Network -> IPsec and select 'click to expand' the widget.
2. Note down the IPsec tunnel name that corresponds to the user.

3. Use the following command to find out the assigned IP.

FGT # diagnose vpn ike gateway list name IPSECDAILUP_0

vd: root/0
name: IPSECDAILUP_0
version: 1
interface: wan1 5
addr: 10.0.0.250:4500 -> x.x.x.x:4501
tun_id: x.x.x.x/::10.0.0.6
remote_location: 0.0.0.0
network-id: 0
transport: UDP
virtual-interface-addr: local: 172.16.1.100
virtual-interface-addr: remote: 172.16.1.100
created: 68s ago
xauth-user: test
2FA: no
peer-id: 192.0.0.4
peer-id-auth: no
FortiClient UID: 4D0A595658440B50010E025401563365
assigned IPv4 address: 10.10.20.1/255.255.255.255
nat: me peer
pending-queue: 0
IKE SA: created 1/1 established 1/1 time 50/50/50 ms
IPsec SA: created 1/1 established 1/1 time 60/60/60 ms

id/spi: 23459 dc08a8ec9ff5e9ba/07c54bd3cfe7fbbb
direction: responder
status: established 68-68s ago = 50ms
proposal: aes128-sha1
key: af8955527f5f0d8f-0f28ac9c14bbe089
QKD: no
PQC-KEM (IKE): no
PQC-KEM (all IPsec): no
lifetime/rekey: 28800/28461
DPD sent/recv: 00000000/000009fd
peer-id: 192.0.0.4

Method 2:

Under Log and reports -> System events -> VPN events.