Skip to main content
A
Anonymous_User
Contributor
January 5, 2010
Question

VPN over PPPoE connection

  • January 5, 2010
  • 4 replies
  • 5674 views
Hello, I have a problem, for which I cannot find an easy answer: I have a FWF50B with PPPoE connection on wan1. I have set up IPSec tunnel for client-to-site connection. I also set up my FortiClient to connect to VPN remotely. Nothing ambiguous so far. It works just fine. Still, I have some problems with power loss on my FG (because of the power supplier - provider), and every time the box reboots, it receives a different IP from the Internet provider. This way I cannot connect with my FortiClient remotely, because I don' t know the gateway IP anymore. Can someone help me find out a solution to this problem? (one which doesn' t include aquiring an APC or something else) I am running v4.0 MR1 patch1. Thank you.

    4 replies

    rwpatterson
    rwpatterson
    New Member
    January 5, 2010
    Set up Dynamic DNS on the interface. This will let you use a domain name that will follow the IP address changes.
    A
    Anonymous_UserAuthor
    Contributor
    January 5, 2010
    Hello, exactly this I have done, after some research. I will explain the steps I have followed, in order for others not to waste too much time with digging into this issue. I don' t have a registered domain, so I used a free one from www.dyndns.org. I have created an account and a host under the domains supported by the DDNS client in Fortigate. After this, I configured the FG by enabling DDNS option under wan1 interface and completing the empty fields with the information from dyndns account (domain, server, username and pass). This way, every time the IP will change, the DDNS client in FG will connect to dyndns.com and update the host information with the new IP.
    rwpatterson
    rwpatterson
    New Member
    January 5, 2010
    Exactly. Well done.
    A
    Anonymous_UserAuthor
    Contributor
    January 7, 2010
    I have another question regarding this topic: I am using a VIP. Still, as you know, to create it, I had to use external IP, which again brings us at the same problem: if my IP is changing every time, I cannot access the VIP anymore.
    rwpatterson
    rwpatterson
    New Member
    January 7, 2010
    Change the outside IP to the wildcard (0.0.0.0). This will cover all IP addresses there. Be careful if you do not use port forwarding, as this will prevent you from managing the device from the outside.
    A
    Anonymous_UserAuthor
    Contributor
    January 7, 2010
    Thank you, that worked. I am using port forwarding, so remote management should not be a problem.
    Terms & ConditionsAccessibility statement