Skip to main content
Vernon76
Vernon76
New Member
October 25, 2015
Question

Issue with setting up IPSec VPN Access toNetwork for Remote Users using FortiClient

  • October 25, 2015
  • 1 reply
  • 4548 views

Hi All,

 

I have two issues currently 1) I'm trying to setup a IPSEC VPN for remote users using forticlient, but for some reason when I try to connect, get the error message to check configuration pre share key etc.

But if I am connected directly to the network, it works.

When trying to connect through wifi at any location it seems to be trying and during pinging I notice that I lose internet connection.

2)Also I noticed that I can't access the fortigate using HTTPS, on any location for remote management or even connected to the network, I can acces through the internal IP only.

Is there something I need to enable?

thank you in advance

 

 

    1 reply

    Somashekara_Hanumant
    Staff & Editor
    Somashekara_Hanumant
    Staff & Editor
    October 25, 2015

    Hi,

     

    "1) I'm trying to setup a IPSEC VPN for remote users using forticlient, but for some reason when I try to connect, get the error message to check configuration pre share key etc."

     

    To further assist, you need to capture the packets from the below command when you try to connect IPSec VPN

     

    diag debug reset

    diag debug appl ike -1

    diag debug enable

     

    After initiating the above commands on the ssh session then try to connect the VPN from outside.

     

    "When trying to connect through wifi at any location it seems to be trying and during pinging I notice that I lose internet connection."

    > do you mean after VPN is connected, are you trying to ping the internal resource, then the internet connection is lost, if yes you need to enable the split tunnel in order to route only the interesting traffic via the tunnel, or route all the traffic via the tunnel and create a firewall policy from VPN interface to internet interface to allow the internet traffic from VPN client.

     

    2)Also I noticed that I can't access the fortigate using HTTPS, on any location for remote management or even connected to the network, I can acces through the internal IP only.

    Is there something I need to enable?

     >> please make sure to enable HTTPS option under System > Network > Interfaces > edit the WAN1 interface

     

    Do let us know if you have any queries.

     

    Regards,

    Somu  

    ede_pfau
    SuperUser
    ede_pfau
    SuperUser
    October 25, 2015

    One should mention that you should not enable HTTPS or SSH on any internet facing ports per default. It's OK for a limited time while debugging the VPN but anything beyond that is asking for trouble. Be sure you give the admin account a secure password.

    Vernon76
    Vernon76Author
    New Member
    October 25, 2015

    Hi Somu and Ede,

     

    Thank you for both your replies.

    I manage to find the issue on why I can't connect.

    I called a fried of mine who work at ISP, which provides me internet and seems that my adsl router is a residential router and they don't give public ip to them only to business router.

    But when I'm connected physically to my firewall the vpn connection works.

     

    As for the connecting to the https issue, I have enabled it at a client, but not working, should SSH also be enabled?

    And I need to check with their ISP if they have public ip also.

     

    Krs,

     

    Vernon76

    Terms & ConditionsAccessibility statement