Wan to another router

Forum|Forum|5 years ago
March 10, 2021
3 replies
2960 views

Dear sir,

our LAN = 192.168.1.0 /24

WAN = 37.99.167.26

WAN is connected to another cisco router vlan1 = 37.99.167.25

LAN user are getting internet through WAN of fortinet 60D.

Cisco router are configure with GRE tunnel.

from router we can reach other side of tunnel.

Also a PC connected directly to cisco router can reach to other side of TUnnel.

But PC behind Fortinet 60D can not reach other side of tunnel.

I did static route in fortinet to forward all traffic for destination of other side tunnel as well as static route in cisco for incoming traffic for 192.168.1.0 to forward to fortinet.

But nothing solving to get the other side of tunnel from behind the firewall fortinet 60D.

Kindly send me solution.

Toshi_Esumi

SuperUser

Two questions:

1) are you sure either the FGT or the Cisco is NOT NATing this particular path/traffic?

2) If no NAT, does the other end of GRE route back to the GRE for 192.168.1.0/24?

sw2090

SuperUser

you write that you have set up the routing. Do you have policies on your FGT which allow the traffic? Does the cisco have the required firewall rules to allow the traffic?

Does the cisco have a route back to the subnet behind the FGT?