Yes, I could do it this way, but I would prefer to keep the two VDOMs isolated from each other. In the Cisco and Juniper worlds you can create a VPN tunnel with the physical interfaces in one VRF and the logical tunnel interfaces in a different VRF.
This would 1) simplify policy setup and 2) allow for small remote office cases where only one public address is allowed.
Tim McKee
________________________________
From: Rolf Stange via VPN:
Sent: Thursday, January 25, 2018 12:52:59 AM
To: vpn@lists.fusecommunity.fortinet.com
Subject: [VPN:] - RE: Split VDOM
If I understand your question right. You are having 2 VDOM. The first one which is the root VDOM which is connected to the public Interface and the 2. one which is the VPN VDOM and that is connected to the 1. one via inter VDOM-link. Is this correct?
If so, you need a public IP on the inter VDOM-link of the 2. one. Alternate you can have this public IP one the 1. one as a VIP and forward the traffic to a private IP on the inter VDOM-link to the second VDOM.
-----End Original Message-----
