Skip to main content
papapuff
papapuff
New Member
April 7, 2019
Question

VPN IPSEC - Client can't connect to other site

  • April 7, 2019
  • 2 replies
  • 4794 views

Hi there,

 

need help please.

we've configured 2 networks connected under VPN IPSEC. both use Fortigate appliance, firmware 5.6.x (forget exact version).

 

site_1 use dynamic IP Public, and fortigate ddns.

site_2 use IP Private (Behind NAT, basically has IP Public, but locked by Provider, must use their own Router).

 

VPN connect successfully. but the issue are:

1. Site_2 can only use zero/thin client computer to connect network site_1 (basically, use Remote desktop technology to connect server on site_1).

2. while use PC / standalone computer on site_2, that PC can't:

- browse network on site_1

- access remote desktop to server on site_1

- from site_1, also can't detect computer on site_2

 

kindly please help how to solve this.

 

thank you.

    2 replies

    makco10
    makco10
    Explorer II
    July 9, 2019

    Hello,

     

    This VPN is routed based or policy based, if you create the vpn with de wizard is routed based and you need to confirm that you have the following:

     

    - Policy in (LAN to VPN interface) NAT Disable

    - Policy out (VPN interface to LAN) NAT Disable

    - static route (destination remote lan and select VPN interface)

     

    Also you can do a debug flow from site 2 fortigate to look how the traffic is being redirected.

     

    Sorry for my bad english.

     

    Regards.

    papapuff
    papapuffAuthor
    New Member
    July 12, 2019

    hi,

    thank you for your advice.

     

    for the policy, refer to fortigate on site_2?

     

    papapuff
    papapuffAuthor
    New Member
    July 25, 2019

    hi makco,

     

    sorry for long feedback.

    already to do so, for policy and static route.

     

    however, still can't work. any advice?

    ituy
    ituy
    New Member
    October 18, 2019

    did you resolve it? i have same problem.

    I have two sites connected using Site-to-Site.

    I've configured site1 with SSL-VPN, it's working properly, i can enter remotely but I have only contact with Site1, Site 2 is unreacheable remotely.

    What can I do?? Please helpp

    Terms & ConditionsAccessibility statement