FortiOS 3.0 to 5.4 - SSL-VPN Commands equivalence

Forum|Forum|9 years ago
March 14, 2017
3 replies
4615 views

Hi,

On a fortigate running FortiOS v3.0, it is possible to specify an IP range for ssl-vpn user groups using these commands :

edit "Group1" set group-type sslvpn set sslvpn-tunnel enable set sslvpn-tunnel-startip 172.16.0.1 set sslvpn-tunnel-endip 172.16.0.10

I upgraded my firmware to v5.4 and these commands are not available anymore. (sslvpn group type doesn't exist)

Where can I specify IP range for my user groups in this version ?

Thanks

Alvi

SSL VPN

Best answer by Toshi_Esumi

Since v3.0 many things have changed around SSL VPN config. First, you have to re-learn how to configure SSL VPN with the documantation for v5.4 below:

http://docs.fortinet.com/uploaded/files/2778/fortigate-sslvpn-54.pdf

The client IP range is now configured in an address object and referred by a portal. The default address object name is SSLVPN_TUNNEL_ADDR1 and _IPv6_ADDR1.

Toshi_EsumiAnswer

SuperUser

Since v3.0 many things have changed around SSL VPN config. First, you have to re-learn how to configure SSL VPN with the documantation for v5.4 below:

http://docs.fortinet.com/uploaded/files/2778/fortigate-sslvpn-54.pdf

The client IP range is now configured in an address object and referred by a portal. The default address object name is SSLVPN_TUNNEL_ADDR1 and _IPv6_ADDR1.