Skip to main content
seferlisk
New Member
April 9, 2026
Question

Inquiry About VPN Chaining / Nested VPN Support in FortiClient

  • April 9, 2026
  • 1 reply
  • 98 views

Hello Fortinet Community,

 

I would like to inquire whether it is possible to implement a VPN chaining (nested VPN) scenario using FortiClient.

 

Use case:

We have a requirement where access to a client VPN is restricted to a specific public IP address (e.g., 193.40.X.X). When connecting from our office network, we are able to access the client VPN successfully because our traffic originates from this whitelisted IP.

 

However, we would like to achieve the following setup:

 

Connect from a remote location (home) to our office VPN using FortiClient.

Once connected, establish a second VPN connection (also via FortiClient) to the client environment.

Ensure that the second VPN connection is seen as originating from the office public IP (193.40.X.X).

 

Questions:

 

Does FortiClient support running multiple VPN tunnels simultaneously (VPN over VPN / nested VPN)?

Are there any supported configurations or best practices to achieve this setup?

Are there specific requirements (e.g., disabling split tunneling, routing adjustments, policy settings) that would allow this to work reliably?

Are there any known limitations or restrictions that would prevent this scenario?

 

1 reply

AEK
SuperUser
SuperUser
April 9, 2026

Hi Seferlisk

If I'm not wrong FortiClient (managed/licensed version) can establish multiple tunnels simultaneously, while the free FortiClient VPN version can't.

In that case running nested/chained VPN tunnels on FCT (managed) looks technically doable, however I didn't try it.

AEK