IP Sec VPN multiple subnets

10 replies
3431 views

I want to add multiple subnets in my existing IP Sec VPN tunnel.

could you please suggest is it possible??

ozkanaltas

Valued Contributor III

Hello @sandeshpatil6524 ,

Yes, you can. You need to just add button on the phase 2 selectors area in existing ipsec tunnel configuration.

After clicking, a new phase 2 configuration area will show.

sandeshpatil6524Author

New Member

Yes i found this tab and also added this in phase 2, but unable to ping from my remote location to office location.

ozkanaltas

Valued Contributor III

Hello @sandeshpatil6524 ,

Did you add a static route and policy for the new subnet? Because ipsec needs these two components to bring up the tunnel. Also, you need to configure it on a remote site for a new subnet. If you didn't do that tunnel won't be up.

Ashishdeep

Staff

How to Configure FortiGate IPsec VPN with Multiple Subnets? – GetLabsDone

sandeshpatil6524Author

New Member

Hi Ashideep,

Thanks for the information,but im using tplink er 605 vpn router at my branch site.

so how could it be working?

SonaMuvv

Staff

Hello,

Once the phase 2 selectors are added on either end of the vpn tunnel.
1) Make sure there is a static/dynamic route to the remote address(mentioned in the phase 2 selector)

-verify the routing table - get router info routing-table details x.x.x.x ---> remote ip address

2) Make sure you have policy to allow the traffic for that specific phase 2 selectors

3) You will have to check the above mentioned points on both firewalls