Can't connect to LAN when VPN connection is made over wireless access point.
I have tried to create a VPN connection from a device connected to a fortinet wireless AP to a device connected to another port on the Fortigate. I have managed to successfully get an IPSec VPN connection, but when connected, i can not ping the other device. Here are the current policies I have in place in an attempt to achieve this:
Outbound Policy (SSID to Internal):
- Incoming Interface: SSID interface.
- Outgoing Interface: Port 2 (internal network).
- Source: SSID subnet. User: VPN_User_Group
- Destination: Internal network subnet.
- Action: Accept.
- Service: All.
Inbound Policy (Internal to SSID):
- Incoming Interface: Port 2 (internal network).
- Outgoing Interface: SSID interface.
- Source: Internal network subnet.
- Destination: SSID subnet.
- Action: Accept.
- Service: All.
IPSec Policy (IPSec to Internal):
- Incoming Interface: IPSec interface.
- Outgoing Interface: Port 2 (internal network).
- Source: Client address range subnet. User: VPN_User_Group
- Destination: Internal network subnet.
- Action: Accept.
- Service: All.
When i try ping the internal network interface, i get "request timed out". I can only ping as far as the AP interface. There is the port interface that the AP connects to so my next step is to look at what policies may need to be applied using this interface. Any help is greatly appreciated.
