Skip to main content
LGPC
LGPC
New Member
November 4, 2014
Question

Fortigate transparent mode & VPN

  • November 4, 2014
  • 3 replies
  • 10836 views

Hey guys,

 

need some help angain!

I got my Fortigate 500A running in Transparent Mode. The management IP is 10.0.0.99 and my gateway (a DSL box) is 10.0.0.138. Now I want to connect my Smartphone and my Notebook from everywhere to the VPN (IPsec) Service running on the Fortigate. I got a Dynamic DNS and port forwarding is also no problem (but at the moment I don´t know the VPN Ports to forward). Buthow do I setup the FortiOS 4 on the FIrewall? (I want to connect with the Forti VPN Client)

 

thanks

-Lukas

3 replies

Rewanta_FTNT
Staff
Rewanta_FTNT
Staff
November 5, 2014

Hi,

 

In transparent mode, there is no dhcp server/interface based vpn support in FGT, so when client asks the ip, FGT cant lease/send them. This is a big challenge for the smart phones as they need IP from vpn server(unless custom ipsec app) most of the time. However in the notebook, you can have the forticlient and configure normal policy server mode vpn in FGT and have the forticlient have the static IP. This should work. VPN config must be done from CLI in TP mode. 

 

However in the newer fortios code 5.2, dhcp proxy can be configured to send the dhcp request to the external dhcp server. however 500A can't support 5.0 code. 

 

HTH.

LGPC
LGPCAuthor
New Member
November 5, 2014

Ok, thanks a lot for your answer.

I think I change the settings to NAT mode to get the VPN working.

LGPC
LGPCAuthor
New Member
November 5, 2014

Thanks a lot, I thought about that already, but I think I will configure the FW to NAT, because I rat a lot about

Static Routes and Policys and I think It´s a bit easer to setup than the Domain.

norouzi
norouzi
New Member
November 5, 2014

Hi

You can enable Virtual Domain and use benefit of both of NAT and Transparent features in two VDOM.

 

Terms & ConditionsAccessibility statement