New Member

Question

FOrtigate to Netgear IPSec with PPPOE

Forum|Forum|8 years ago
January 29, 2018
1 reply
5479 views

Hi

Please can someone assist.

I have an IPsec VPN tunnel between a Fortigate 60D & a Netgear FVS318. The Fortigate has a static IP address BUT the Netgear uses a PPPOE connection that is linked to a DYNDns name.

The problem I'm facing is that when the IP address updates on the Netgear the Fortigate does not get updated hence the VPN goes down until I change the name and back to the Dyndns name.

How will I get the Fortigate to update the IP and renegotiate the tunnel?

Thanks in advance.

New Member

Hi,

You have two solutions for your current issue but it depends on your requirement.

1. Configure DYDNS name on Netgear device. I am shared below link for your reference.

http://documentation.netgear.com/fwg114pv2/enu/201-10301-03/FWG114Pv2-20-4.html

2. As you mention that you have static IP for your FortiGate device. So change the IPSec tunnel type from S2S to Dialup user.

http://help.fortinet.com/fos50hlp/52data/Content/FortiOS/fortigate-ipsecvpn-52/FGT_Dialup_Client_Config/Config_Server_Accept_FGT_Dialup.htm

Make sure, Your Netgear site must have a client site. Because VPN negotiation must be started from NetGear site. FortiGate will only responder.

Regards,

Deepak Kumar

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.

Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!