Skip to main content
DamianLozano
DamianLozano
New Member
January 28, 2019
Question

Add dynamically route to clients

  • January 28, 2019
  • 1 reply
  • 2514 views

Hello!

 

I am beginner in Fortigate.

I just created a L2TP/IPSec VPN as http://help.fortinet.com/fos50hlp/52data/Content/FortiOS/fortigate-ipsecvpn-52/L2TP_and_IPsec/Config_FGT_Unit.htm

Everything within the cli console.

Where the Fortigate is, there are all clients in the following network: 192.168.1.0/24

I set different addresses for VPN clients: 192.168.11.2-192.168.11.11

I can connect from Windows clients with the native VPN client

The issue is about the option to use the remote default Gateway in the new virtual interface created for the VPN

If I check this option, I can ping to any remote machine but I cannot browse any Internet page, the default Gateway obtenied in the VPN interface is 0.0.0.0

If I unchech this option (Which I prefer, I prefer to use the local Gateway for Internet querys) Internet is working but I cannot reach anything on the 192.168.1.0/24 network, and I have not a route to this network.

 

How can I configure fortigate to dinamically add a route to the 192.168.1.0/24 on the vpn clients?

Is there any setting missed up?

 

Thanks in advance.

Regards!

 

    1 reply

    DamianLozano
    DamianLozanoAuthor
    New Member
    January 29, 2019

    I solved the issue, changing the IP pool inside of the same remote network, example: 192.168.1.201-192.168.1.210

    Buy anyway I would like to know if there are any setting to do in the fortigate, for adding automatically a route in VPN clients to this network

    Another thing is that if I set another pool (outside the network), how can I reach the fortigate if this does not have any IP on this network.  Example, I set fortigate to asign 192.168.11.0 addresses to VPN clients but fortigate does not have any IP in 192.168.11.0/24

     

    Any Idea?

    Terms & ConditionsAccessibility statement