Skip to main content
Pathfinder
New Member
May 31, 2016
Question

VPN Dialup with FortiClient, no access to remote network

  • May 31, 2016
  • 8 replies
  • 10846 views

Hi all

I'm new in the forum and i'm also pretty new on fortinet-products. I try to set up a remote vpn wich is accessible through FortiClient. The wizard is very simple to handle. I can choose the nessesary settings. But after the wizard is done, i have a problem in the configuration of the tunnel. The first section "Network" is shown red. When editting, the "Accessible Notworks" field is clear. When setting the local network manualy and safing, it doesn't work. Next time i want to see details of the config the filed ist still clear.

 

My Config:

FortiGate 100D with FortiOS v5.4.0,build1011

LAN1 IP 192.168.20.1 (FG100D)

Local Subnet: 192.168.20.0/24

IP-Range for FortiClients: 192.168.21.1-192.168.21.254

WAN accessible over fixed IP

User and User-Group are set correct

 

When i try to connect with FortiClient from outside, i have a connection to the firewall, but not to the remote network.

That seeems logic, because there is no accessible network set in forticlient-config.

 

But how can i get this run?

 

regards

Pathfinder

    8 replies

    ede_pfau
    SuperUser
    SuperUser
    May 31, 2016

    Notworks
    very nice, greetings from Freud!

     

    Never mind, welcome to the forums.

    At the moment I cannot guess what is different from a standard setup which always works. Maybe you could post a screenshot of the VPN phase1 and phase2 - we're talking about IPsec, aren't we?

    Pathfinder
    New Member
    May 31, 2016

    Hi Ede

     

    Very nice Freud, in deed. Yes we're talking about IPsec.

     

    Without converting the tunnel to custom tunnel i'm not able to see the details of phase1 and 2.

    I will do this to find the error.

     

    Tunnel Config after creation with wizard

     

    Tunnel, error in network-settings

     

    Tunnel, after converting to custom tunnel

     

    After converting to custom tunnel phase 2 is empty. very strange.

    I can modify phase 2 with correct Netmasks. That works.

    But i can still not change the "Accessible Networks" field, wich ist still red.

     

    Regards

    Marc

    ede_pfau
    SuperUser
    SuperUser
    May 31, 2016

    Do you have an address object defined representing your internal LAN address range? This should go into the red field.

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!