Skip to main content
cahoots18
cahoots18
New Member
April 24, 2020
Question

Can't use local server while Forticlient VPN is running

  • April 24, 2020
  • 2 replies
  • 5101 views

I'm using Forticlient 6.2.6.737 (free version) and I have an issue. When Forticlient is running, I can't use a local server/client connection (the specific setup is detailed at https://docs.bazel.build/versions/master/guide.html#client/server ). How might I fix this?

    2 replies

    Dave_Hall
    Dave_Hall
    New Member
    April 24, 2020

    How is the Forticlient connecting to the VPN?  SSL? IPSec?  I believe Split DNS is needed here and need to specific the domains to be resolved locally. 

    ede_pfau
    SuperUser
    ede_pfau
    SuperUser
    April 25, 2020

    What @Dave really meant (I'm sure this was at the end of a 15 hour work day) is that you need split routing (*).

     

    This means that you specify in FortiClient the subnet address of the network behind the tunnel. If you don't, FortiClient assumes that all networks are behind the tunnel, and forwards all traffic into the tunnel, even traffic to a local host. For you it seems that your local LAN is cut off.

     

    You find split routing in FC settings. After enabling it, you will be prompted to input the remote subnet. The other side of the tunnel does not need to be reconfigured for this.

     

    (*) addendum on re-thinking:

    now, it could really be that if split routing is in place, you still have difficulties with contacting local hosts using their name. While FC is running, the PC is using the DNS (nameserver) which is specified in it's settings. And that might be a DNS on the remote subnet which doesn't know about local names. Then you would actually need either split DNS, or you use IP addresses instead of names to address your local hosts.

    Terms & ConditionsAccessibility statement