Technical Tip: SSL VPN access to multiple VDOMs

[ChrisTan]

Description	This article describes how to allow SSL VPN access to multiple VDOMs.
Scope	FortiGate.
Solution	In this example, VDOM-A, VDOM-B and VDOM-C all have the internet connection via vdomlinks through the Root VDOM. The requirement is to allow specific user groups to access the VDOM internal subnets via SSL VPN separately. To make this work, follow these steps: Setup SSL VPN on each internal VDOM:   Set up the Vdomlink interfaces as Listen On Interface and set different ports separately. For example, VDOM-A on port 6443, VDOM-B on port 5443 and VDOM-C on port 4443. Create the SSL VPN policy accordingly. Note: From 7.4.1 and above, SSL VPN is disabled by default. Refer to FortiGate 7.4.0 new features - FortiGate documentation for more information. On the Root VDOM, create a VIP for each vdomlink:   On the Root VDOM, create a VIP policy for each SSL VPN VDOM:   Now, users can access the VDOM via SSL VPN.