Routing between Azure FortiGate-VM SSL-VPN
Hi, I have two single VM FortiGates in Azure.
Each FortiGate is in a different region.
They were both configured with the default three subnets within a vNet
I have peering between the local vNets and each local FortiGates vNet
So traffic between each regions vNets and the local FortiGate routes correctly.
The FortiGates also have a IPsec P2P to on-premise FortiGates and traffic also routes correctly.
What I'm trying to achieve is routing from either Azure FortiGates SSL-VPN to the other regions FortiGate and local vNets.
I have the SSL-VPN configured with its own subnet and all the required policies to allow the traffic.
I have setup peering between the two Azure FortiGates vNets and even set a UDR routing it to the remote FortiGates internal ip x.x.x.68
I've set these two options on the peering.
Allow 'Region1_FTG' to access 'Region2_FTG"
Allow 'Region1_FTG' to receive forwarded traffic from 'Region2_FTG'
Allow 'Region2_FTG' to access 'Region1_FTG"
Allow 'Region2_FTG' to receive forwarded traffic from 'Region1_FTG'
I have set a static route on each FortiGate to route the traffic for the remote network out of port2, but the traffic still goes nowhere.
I can see the test traffic hitting the SSL-VPN to LAN rule, but it goes no further.
Does anyone have any thoughts as to what I'm doing wrong?
