FortiWifi 90D connect IPSEC to AZURE

Hi Dear All,

I have a FortiWifi 90D with FortiOS 5.2. I wish to connect to Azure via IPSEC. I followed the cookbook for FortiOS 5.2 but still cannot connect. Below are the configurations:

Local office subnet: 192.168.4.0/24

Azure VM IP subnet: 10.0.0.0/24

Azure Virtual network address space:172.168.0.0/16

Subnet-1: 172.168.0.0/24

GatewaySubnet: 172.168.1.0/29

Virtual Network Gateway

Public IP: 52.187.x.x

Local Network Gateway

Address space: 192.168.111.0/24

FortiWIFI Device IP: 203.118.x.x

I can see got traffic in and out but cannot rdp or ping to Azure VMs.

Anybody can help?