Skip to main content
waaalex
New Member
June 29, 2017
Question

MODEM openvpn behin Fortigate 100D Forti OS 5.6 GA

  • June 29, 2017
  • 4 replies
  • 4435 views

Hello, We've got an issue with a modem behind our firewall. It can't connect with openvpn to remote server. The modem is working, we have done tests in my home. It have a rule for it, with no filter, no security profile. In forward traffic, i can see that it sent requests (HTTPS, UDP 1194 openvpn) But there is no response from remote server. Nat enabled and disable >> same issue I have a port mirroring with wireshark, requests are sent but no responses. Can you help me to connect this modem?

 

It worked few month ago, last changes are just update from 5.4 to 5.6.

 

Thanks.

    4 replies

    emnoc
    New Member
    June 29, 2017

    1>

    the cli diag debug flow  is your friend, I would run it and validate the  requests are not being drop

     

     

    e.g

     

    diag debug reset 

    diag debug enable

    diag debug flow filter dport 1194

    diag debug flow show console enable

    diag debug flow trace start 20

     

     

    run the client. A> does a fwpolicy match B> is it drop/accept

     

    After diagnostic

     

    diag debug disable

    diag debug reset 

     

     

    2> ensure the openvpn 1194 is functional at the remote -server ( use a openvpn   client directly )

     

     

     

     

    EMES
    New Member
    June 29, 2017
    Are you allowing the traffic inbound or outbound?
    waaalex
    waaalexAuthor
    New Member
    June 29, 2017

    Outbound.

    The MODEM is inside, behind the forti unit.

    No inbound policy, the MODEM initialize the connection.

     

    Thanks.

     

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!