Skip to main content
OsaidFG
OsaidFG
New Member
February 17, 2018
Question

IPsec VPN client

  • February 17, 2018
  • 1 reply
  • 5331 views

Dear All, I connected my fortigate with ADSL router ;( WAN port in FG :(192.168.1.2) --->>ADSL LAN port (192.168.1.1) and i set ADSL router DMZ option to FG (192.168.1.2). internet goes ok via FG (inbound and outbound). i set up SSL vpn OK and working fine .(User set real ADSL IP in forticlient SW)

I face problem that i can not connect via forticlient IPsec with this setup after i configure IPsec by using wizard.

Error is in attachment

Kindly your Assistance

Regards.

    1 reply

    ede_pfau
    SuperUser
    ede_pfau
    SuperUser
    February 18, 2018

    no, it's not would you please post the error message?

     

    One hint: I'm using this setup often but for the ADSL part I use a simple modem in Bridge Mode. No credentials of the ISP on the modem itself, the FGT is doing the PPPoE dial-in. This way, the FGT's wan port is assigned the public IP address and any kind of VPN or port translation service is no problem.

    Maybe your router is reacting on ESP if it's got VPN capabilities (like FritzBoxes used to). Then again, there is so many ways an IPsec VPN is not set up 100% correctly, it doesn't have to be the router-FGT setup at all. Try to test with a simple 6 places PSK, and check that there is an accepting policy and a route back to the client's (private) IP range.

    OsaidFG
    OsaidFGAuthor
    New Member
    February 18, 2018

    Thank edu_pfau,

    yes , i am using Bridge with PPPOE setup in another unit without any problem in VPN, i ADSL router just i forward all traffic to FG (using DMZ).

    in FG (that connected to ADSL), I'm using the IPsec wizard that  I've successfully used in another unit and i am not add any policy or other additional configuration , 

    the error is :@ VPN connection Failed , please check your configuration abd pre-shared key then retry your connection..@

    what do you mean 6 psk?

     

    Regrads

    ede_pfau
    SuperUser
    ede_pfau
    SuperUser
    February 18, 2018

    PSK=preshared key. You specify a PSK in phase1 to protect access to your VPN.

    Be sure that you have a policy which allows traffic from/into the tunnel interface! Otherwise, the VPN won't connect.

    Terms & ConditionsAccessibility statement