Skip to main content
FeM_User
FeM_User
New Member
January 7, 2020
Question

Setting a VPN behind two offices with two 30E one behind another router

  • January 7, 2020
  • 1 reply
  • 5460 views

Hi forum.

I have a question that cannot find the answer even if searching through this forum, and over the network. I have found several discussions here a little bit too far from my configuration so I am opening a new thread.

I have two offices I want to connect via VPN both running Fortigate 30E but in different manner.

The first has the 30E that acts as router+firewall, so the WAN comes inside into the WAN plug and the internal switch is connected to the LAN plug. No problem whatsoever.

The second is placed behind another router (with disabled firewall). Due to the IT manager of the company he did not wanted the 30E to be put in the middle so he connected it behind the telephone company router in the LAN segment having him the address x.x.x.253. No WAN connection, simply the LAN plug inserted into the network segment.

Now the fact. Could such a configuration work ( I mean with no WAN connection of the 30E)

I have already forwarded the UDP port 500+4500 of the router  to the 30E as found in another thread in this forum.

 

Thank You so much.

 

Ferrero

    1 reply

    Toshi_Esumi
    SuperUser
    Toshi_Esumi
    SuperUser
    January 7, 2020

    You couldn't find this? I would assume many more threads can be found. This is a little old but still legit, yet have good explanation how it would work for NAT-T situation.

    https://forum.fortinet.com/tm.aspx?m=129501

     

    FeM_User
    FeM_UserAuthor
    New Member
    January 7, 2020

    Toshi Ensumi.

    Thank You but I had already found that thread infact there is a mention I have followed where to open UPD 500+4500 port . but there it is mentioned that "The Branch Fortigate WAN interface will be directly connected to a spare LAN interface on the landlord’s NAT router (a Netgear N150 Wireless MODEM Router DGN1000)."

    Do I have to configure my Fortigate like that? Putting inside the Fortigate's WAN plug one LAN segment?

    What do I have to connect to the Fortigate LAN plugs?

    Thank You

     

     

    Toshi_Esumi
    SuperUser
    Toshi_Esumi
    SuperUser
    January 7, 2020

    You set up those forwardings to the FGT at the NetGear, right? That's all you need. And on the FGT side, you just need to make sure NAT-T is configured as in the thread.

    Terms & ConditionsAccessibility statement