Skip to main content
sethadrian
sethadrian
New Member
July 9, 2015
Question

1 WAY TRAFFIC ISSUE IPSEC VPN ON ANDROID AND IOS DEVICES

  • July 9, 2015
  • 1 reply
  • 2656 views

Hi Everyone,

 

I'm having issues with 1 way traffic only passing through IPSEC VPN tunnel on an FG110C with v5.2.3.  We installed a SIP VOIP application on both Android and IOS devices passing through IPSEC tunnel via forticlient and native tunnel for IOS respectively.

Policies of incoming>VPNIOS tunnel-outgoing>internal on two tunnels as well.  In addition PBR has been created (i.e. srcip=<voice VLAN> to dstip=<IOS tunnel subnet> then outgoing interface=IOSVPN and default gateway of ISP as gateway address).  I also added optional opposite direction policy relative to policy stated earlier to try but still did not work.  By the way we are using media5-fone application on both devices.  Hoping for someone to help me on this. 

 

Thanks

    1 reply

    Benoit_Rech_FTNT
    Staff
    Benoit_Rech_FTNT
    Staff
    July 16, 2015

    Hello,

    As you are using PbR to route the traffic, may be you have an asymetric routing issue on the returned traffic.

    You need to run 'diag debug flow' commands to under why the traffic is dropped.

     

    Best regards,

    Benoit

    Terms & ConditionsAccessibility statement