Skip to main content
slemke
Visitor III
August 12, 2016
Question

Site 2 Site VPN Layer 2 (L2TP?)

  • August 12, 2016
  • 4 replies
  • 10276 views

Hello,

 

i have been asked for a Layer2 Site to Site VPN (I would not like to discuss an alternative - at this moment - because this is the technial requirement of the customer..).

 

I have done some research here in the discussions and found several statements that this is not possible at the moment with Fortigate units.

 

My question is: Is this statement still correct or is there a possibility in the newest firmware to do this? I am wondering about the L2TP over IPSec Support (i.e. for Android Dialin VPN). Is there a way to use this between two Fortigate units or do I miss something?

 

Thanks, Sebastian

 

    4 replies

    ede_pfau
    SuperUser
    SuperUser
    August 12, 2016

    hi,

     

    there's been a post recently about L2TP server functionality in FortiOS: https://forum.fortinet.com/tm.aspx?m=139960

    It is possible but the L2TP client feature is only available on the desktop models (< 100D).

    I haven't tried it but with one FGT as L2TP server and the other as L2TP client it should meet your requirements.

    slemke
    slemkeAuthor
    Visitor III
    August 12, 2016

    Hello, thanks for pointing the direction...!! Is there anybody here in the forum who has tested such a setup? If not I plan to do this (FG100D & 60D available), but I am a bit out of time actually ;-) Thanks, Sebastian

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!