Traceroute for remote address across the VPN showing the incorrect second hop. The second hop is going through the 'mgmt' 'DMZ' 'wifi-controller' interface. This happens because the VPN interface has an IP address of 0.0.0.0 so the FortiGate uses the first interface according to the ifindex number.
Does this matter or what interface should i set it too? i have multiple vlans however I use one vlan for all internal connection traffic.
Hello,
When the ipsec-virtual-interface is set to 0.0.0.0 it cannot be used in route table, thats when FGT selects the interface with the highest interface-index in the traceroute hop-count, but that entry in the table doesnot mean that the traffic is routed through that wrong interface that is displayed in the table. If you wish to see the correct vpn interface in the tracert, then you can configure the vpn-interface with an ip-address
Regards Anil Nayak
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
