How to allow access between remote IPSec endpoints?

Forum|Forum|6 years ago
April 2, 2020
4 replies
8305 views

Greetings,

I have a FortiGate at the main office, subnet 192.168.1.0

There are several hardware-based IPSec VPNs for remote locations:

Remote office 2, subnet 192.168.2.0

Remote office 3, subnet 192.168.3.0

Remote office 4, subnet 192.168.4.0

and so on.

The main office can reach each of the remote offices.

How can I allow each of the remote offices to reach each other?

Thank you,

Steve

5.2

rgesche

New Member

two options:

option one: you configure in any office ipsec connections to any office

option two: add all subnets in ipsec phase 2 options of ipsec configuration for any tunnel, create routing entries in remote offices for destionation subnets (other rekote offices) over ipsec inteface and corresponding firewall rules on all fortigates.