WAN VLAN Port forwarding and SSL VPN

Forum|Forum|4 years ago
February 2, 2022
4 replies
8152 views

Hi everyone,
few days ago i configured on my FGT60E the WAN1 internet connection ftth via PPPoE on a VLAN ID XXX (vlan id provided by the connectivity provider).

The physical router of the old connection fttc has been removed.

Unfortunately, the SSL VPN portal is unreachable.

And port redirection also doesn't work... (80, 443 directed to the lan) :((
I updated the VIP, by entering the address assigned to me by the PPPoE negotiation in the external ip but it doesn't work anyway... what am i missing? I have never worked with wan connections that have VLANs.

Thank you all.

FortiGate

Flamba1Author

Explorer

anyone have any ideas? I have a bad headache and I don't know where to look anymore.

Debbie_FTNT

Staff & Editor

Hey Flamba1,

did you configure a VLAN interface on top of the WAN interface to handle the VLAN tagging?

If yes, you might need to ensure that your VIPs and SSLVPN use the VLAN interface in their configuration, not the physical interface.

Flamba1Author

Explorer

outbound traffic works, the authentication works and i see the public ip that is assigned to me.
on the physical interface wan1 i set a manual ip 0.0.0.0

but i don't understand this very well:
"you might need to ensure that your VIPs and SSLVPN use the VLAN interface in their configuration"

on my internal interface i have no vlan.
in the virtual ip configuration i set on interface the VLAN on wan1
in the external ip of the vip i set the public IP assigned by the provider.
in the internal ip of the vip i set the ip address of a machine on my internal network .
then i created the ipv4 policy...

am i wrong something?