Route Bastion to Fortigate

Forum|Forum|2 years ago
November 6, 2023
4 replies
3779 views

Hi FGT Gurus,

I have site-to-site VPN between AZ FGT to on-prem FGT. The AZ FGT is in the same Vnet of VMs in Azure. I have no problem to use bastion to communicate any VM in the same Vnet. All the AZ VMs have no problem to communicate with on-prem vms via the VPN tunnel. For example, use bastion to login AZ VM, then RDP to on-prem VM. If i need to use bastion to connect any on-prem VMs directly, how do I route bastion to certain subnets that host on on-prem? According to MS, I cannot route bastion in UDR. Thank you.

FortiGate

Jean-Philippe_P

Staff & Editor

Hello polarpanda,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

Jean-Philippe - Fortinet Community Team

Jean-Philippe_P

Staff & Editor

Hello,

We are still looking for an answer to your question.

We will come back to you ASAP.

Thanks,

Jean-Philippe - Fortinet Community Team

hbac

Staff

Hi @polarpanda,

I believe you need to configure IP-based connection on Azure for Bastion to work over Site to Site VPN. Please refer to https://learn.microsoft.com/en-us/azure/bastion/connect-ip-address

Regards,