Fortigate - PFSense IPsec Tunnel

Forum|Forum|13 years ago
July 23, 2013
7 replies
7594 views

Hi, I' ve configured an IPSEC Tunnel between fortigate and another firewall called PFSense. The tunnel is UP and everything is fine. Servers behind the Fortigate firewall can ping the remote host that are behind PFsense and vice versa. One problem that I' m experiencing is that servers behind fortigate can ping the remote gateway (172.16.10.1 - Pfsense LAN Gateway), but not the other way round, meaning that servers behind PFsense cannot ping the remote gateway (192.168.10.1 - Fotigate LAN Gateway). Im sure that this is something that has to do with rules from the Fortigate side. Any Ideas? maybe someone has already ran into this problem. The version of the firewall that I have is Fortigate-200A 3.00-b0737(MR7 Patch 3) Thanks! awaiting for you reply.

ede_pfau

SuperUser

Is ping enabled on the ' internal' interface of the FGT?

rwpatterson

New Member

Is this the same behavior as I described in the other post? The admin access must be allowed from that IP subnet in order to receive a PING response.

bristiAuthor

New Member

Hi, In the admin access it only allows you to enter 3 trusts. And unfortunately the 172.16.0.0 subnet is not int the list. How can I add more IP' s for the same admin. Thanks.