static route via tunel

[Mateusz]

Mam problem, mam podwójny nat zrobiony na tunel_VPN i chcę stworzyć statyczny routing dla innej sieci z tunelu 172.22.0.0/24, ale kiedy sprawdzam traceroute wysyła go w przestrzeń. Dodaję sygnał do przejścia przez moją bramkę WAN (port1) i dodaję utworzony interfejs tunel_VPN, ale to nie działa. Czy ktoś może mi pomóc?

[AlexC-FTNT]

I guess some details may be also lost in translation, but it's also hard to guess what you are trying to configure and what actually happens. Does this article help?
https://docs.fortinet.com/document/fortigate/6.0.0/cookbook/657805/site-to-site-ipsec-vpn-with-overl...

[parteeksharma]

Hi Alex,

As per the google translation for the problem you defined it seems you are facing issue with traffic passing through VPN. For the traffic to work through VPN tunnel to pass, it should have below:

>> The IP address of source and destination should belongs to Proxy-ids created for the VPN tunnel.
>> The policy should be there on fortigate to allow the traffic through correct interfaces.
>> The route should be present pointing towards tunnel.

Regards,
Parteek