Skip to main content
umarashraf
New Member
January 27, 2025
Question

Want To Create an VPN between 2 Fortinet of Two diffrent place.

  • January 27, 2025
  • 4 replies
  • 1121 views

Hi EveryOne,

I need little help on following.

I have two location Location A in NY, USA and Location B in Pakistan. Both location have Fortinet firewall with dedicated Ip Addres. 

Actually I want to use USA Location Internet Like when I will go my web browser and search what is my IP that is always show internet location Of NY, USA Office. In simple words I want to use NY, USA office resources. what configuration I require to connect two diffrent places.
Please Help on this.

Regards,
Umar Ashraf

4 replies

AEK
SuperUser
SuperUser
January 27, 2025

Hi Umar

You can create a site to site VPN with the wizard. It is simple and secure.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-configure-VPN-Site-to-Site-between/ta-p/197922

Hope it helps.

AEK
umarashraf
New Member
January 27, 2025

Thankyou , 

But please confirm through this way I am able to restrick the specific location.when I will go my web browser and search what is my IP that is always that specific location internet.

AEK
SuperUser
SuperUser
January 27, 2025

Yes I confirm. When you visit "What is My IP" on the Web you will see NY''s IP even if you are in Pakistan.

AEK
Dhruvin_patel
Staff
Staff
January 27, 2025

Greetings!

 

One important step, once the VPN tunnel is established, configure the routing on the Pakistan Fortinet firewall to route all internet traffic through the VPN tunnel to the New York Fortinet firewall.

 

You need the following routes:

 

1) Route that will be used to establish the tunnel

 

config router static

edit 0
set dst x.x.x.x 255.255.255.255
set gateway y.y.y.y
set device "Outgoing wan interface"
next
end

 

x.x.x.x is New York FortiGate IP, which actually used as a remote IP in tunnel configuration on Pakistan FortiGate.
y.y.y.y is a gateway IP, next hop IP.

 

2) Default route to send the Internet traffic through the IPSec tunnel.

 

config router static
edit 0
set device "tunnel interface"
next
end

 

Note: without the first route, the tunnel will not come up.

 

Regards!

If you have found a solution, please like and accept it to make it easily accessible for others.

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!