Skip to main content
jomof
New Member
December 27, 2024
Solved

Is there an option to configure client server vpn instead of using ADVPN autoconfig.

  • December 27, 2024
  • 1 reply
  • 1395 views

Hello Expert,

 

I would like to setup client server vpn, but would prefer to use a customize setup as instead of ADVPN (I have move control of the setup)

I notice the option to use dialup user for customize setup can I use this option Instead of the ADVPN?

I humbly request some guidance

 

 

Screenshot 2024-12-27 153744.png

 

Thank you

Regards 

Best answer by johnathan

On the firewall with a static IP the tunnel should be set up as a dial-up, then on the firewall with the dynamic IP you can set it up as a regular site to site tunnel.
More details can be seen here: https://community.fortinet.com/t5/FortiGate/Technical-Tip-IPsec-VPN-between-static-and-dynamic-IP-FQDN/ta-p/191815

ADVPN is for Hub and Spoke VPN deployments with many firewalls and probably not what you need here.

1 reply

johnathan
Staff
Staff
December 27, 2024

What are you actually trying to do? You mention you want a 'client server vpn' which makes me think this is supposed to be a VPN that users connect to from their PCs, but you are also mentioning ADVPN which is a feature only used between firewalls. If you are able to outline specifically what you are trying to achieve, that would be great. 

Never trust a computer you can't throw out a window.
jomof
jomofAuthor
New Member
December 27, 2024

Hello Johnathan,

My humbly apologies for miscommunication but  I would like to  manually  configure an auto discovery vpn  between two firewalls . The reason  for this is ,  I have client that will be using an IPS that   dynamically assigned  the ip address.

 

Thank you 

 

Regards

johnathan
Staff
johnathanAnswer
Staff
December 27, 2024

On the firewall with a static IP the tunnel should be set up as a dial-up, then on the firewall with the dynamic IP you can set it up as a regular site to site tunnel.
More details can be seen here: https://community.fortinet.com/t5/FortiGate/Technical-Tip-IPsec-VPN-between-static-and-dynamic-IP-FQDN/ta-p/191815

ADVPN is for Hub and Spoke VPN deployments with many firewalls and probably not what you need here.

Never trust a computer you can't throw out a window.