Skip to main content
NZ-Tech
Explorer
December 10, 2021
Solved

Fortigate IPSec Remote VPN connects but cannot access network resources.

  • December 10, 2021
  • 4 replies
  • 11194 views

Hi there, bit of a noob here, thanks for your understanding in advance :)

 

The hardware: Fortiwifi 60f, FS148OE Switch.

 

The switch is connected via FortiLink and has been authorizes and is showing as online.

 

I have the gate with a few rules, a VLAN for the switch ports on 10.2.2.0/24 

I have setup a IPSEC remote vpn (split).

 

The VPN can connect no problem and is getting IP and DNS from VPN (using Forti client).

My issue is that I can access network resources - cannot ping either way.

Let me know if more info is needed....

 

Policy as follows:

config firewall policy

edit 13

set name "vpn_IPSEC_VPN_remote_0"

set srcintf "IPSEC_VPN"

set dstintf "INSIDE_FortiSwitch"   --->(10.2.2.0/24)

set action accept

set srcaddr "IPSEC_VPN_range"

set dstaddr "all"

set schedule "always"

set service "ALL"

set logtraffic all

set nat enable

set comments "VPN: IPSEC_VPN (Created by VPN wizard)"

next

end

 

THE VPN:

IP Version IP v4

Incoming Interface: VOIP_HQ_WAN (WAN-UFB)

Use system DNS in mode yes

Assign IP RANGE 10.2.2.220-10.2.2.228

SUBNET: 255.255.255.0

IPv4 Split Tunnel: yes

Best answer by R_F

how about defining your static route?  you can try as well SSL VPN as your tool for remote access.

 

destination: ipsec vpn net

gateway: 0.0.0.0

interface: IPSEC_VPN (VPN Tunnel name)

 

 

4 replies

R_F
R_FAnswer
Explorer
December 13, 2021

how about defining your static route?  you can try as well SSL VPN as your tool for remote access.

 

destination: ipsec vpn net

gateway: 0.0.0.0

interface: IPSEC_VPN (VPN Tunnel name)

 

 

NZ-Tech
NZ-TechAuthor
Explorer
December 13, 2021

Thanks for that - worked a treat :)

R_F
Explorer
December 14, 2021

good to hear it works on your end.

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!