Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
ChangU
New Contributor

L2TP/IPSec VPN 1 IP address 1 user?

I set up L2TP/IPSec on Fortigate for remote maintenance.

but We can't connect to L2TP/IPSec from same Network(under NAPT Router).

 

Can't we connect to L2TP/IPSec VPN from same IP address?

if so, how can i connect from same Network(under NAPT router)?

 

Thanks in advance

 

1 REPLY 1
dvp
New Contributor

Hello.

 

I have been facing this issue too. But solution was find with TAC help.

 

According to http://docs.fortinet.com/...1/fortigate-cli-52.pdf

there is route-overlap option for ipsec phase2. By default, when new client has same source IP address, IPSec deletes old SA and create new for new client.

 

Simply adding one config line resolve issue:

 

config vpn ipsec phase2(-interface) edit "dhcp-ipsec_p2" set route-overlap allow next end

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors