Skip to main content
Umesh
Explorer II
November 3, 2022
Question

S2S IPsec vpn || unable to understand ||

  • November 3, 2022
  • 1 reply
  • 799 views

Hi all,

I would like to know something which I am unable to understand it, Can anyone explain it thoroughly.

As snapshot has highlighted - 

Internet access - 

None,

Share WAN

Force to use remote WAN.

Umesh_0-1667457991612.png

 

Thank you

 

 

1 reply

akristof
Staff
Staff
November 3, 2022

Hello,

They are just simplifying a bit how remote selectors and which interfaces will be added into firewall policies.

None - you will need to manually specify local interface, local and remote selectors

Share Wan - you will be asked for local wan interface. What it will do is that it will add this interface into firewall policy because it expect that the remote firewall will use this firewall as internet access also. More info:

https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/301182/tunneled-internet-browsing

Force to use remote WAN - it will configure 0.0.0.0/0 as remote selectors and then install it as static route - it will be default route and traffic will be send to remote firewall.

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!