Fortinet Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
NZ-Tech
New Contributor II

Fortigate IPSec Remote VPN connects but cannot access network resources.

Hi there, bit of a noob here, thanks for your understanding in advance :)

 

The hardware: Fortiwifi 60f, FS148OE Switch.

 

The switch is connected via FortiLink and has been authorizes and is showing as online.

 

I have the gate with a few rules, a VLAN for the switch ports on 10.2.2.0/24 

I have setup a IPSEC remote vpn (split).

 

The VPN can connect no problem and is getting IP and DNS from VPN (using Forti client).

My issue is that I can access network resources - cannot ping either way.

Let me know if more info is needed....

 

Policy as follows:

config firewall policy

edit 13

set name "vpn_IPSEC_VPN_remote_0"

set srcintf "IPSEC_VPN"

set dstintf "INSIDE_FortiSwitch"   --->(10.2.2.0/24)

set action accept

set srcaddr "IPSEC_VPN_range"

set dstaddr "all"

set schedule "always"

set service "ALL"

set logtraffic all

set nat enable

set comments "VPN: IPSEC_VPN (Created by VPN wizard)"

next

end

 

THE VPN:

IP Version IP v4

Incoming Interface: VOIP_HQ_WAN (WAN-UFB)

Use system DNS in mode yes

Assign IP RANGE 10.2.2.220-10.2.2.228

SUBNET: 255.255.255.0

IPv4 Split Tunnel: yes

1 Solution
R_F
New Contributor III

how about defining your static route?  you can try as well SSL VPN as your tool for remote access.

 

destination: ipsec vpn net

gateway: 0.0.0.0

interface: IPSEC_VPN (VPN Tunnel name)

 

 

View solution in original post

3 REPLIES 3
R_F
New Contributor III

how about defining your static route?  you can try as well SSL VPN as your tool for remote access.

 

destination: ipsec vpn net

gateway: 0.0.0.0

interface: IPSEC_VPN (VPN Tunnel name)

 

 

NZ-Tech
New Contributor II

Thanks for that - worked a treat :)

R_F
New Contributor III

good to hear it works on your end.