1 WAY TRAFFIC ISSUE IPSEC VPN ON ANDROID AND IOS DEVICES

[sethadrian]

Hi Everyone,

I'm having issues with 1 way traffic only passing through IPSEC VPN tunnel on an FG110C with v5.2.3.  We installed a SIP VOIP application on both Android and IOS devices passing through IPSEC tunnel via forticlient and native tunnel for IOS respectively.

Policies of incoming>VPNIOS tunnel-outgoing>internal on two tunnels as well.  In addition PBR has been created (i.e. srcip=<voice VLAN> to dstip=<IOS tunnel subnet> then outgoing interface=IOSVPN and default gateway of ISP as gateway address).  I also added optional opposite direction policy relative to policy stated earlier to try but still did not work.  By the way we are using media5-fone application on both devices.  Hoping for someone to help me on this. 

Thanks

[Benoit_Rech_FTNT]

Hello,

As you are using PbR to route the traffic, may be you have an asymetric routing issue on the returned traffic.

You need to run 'diag debug flow' commands to under why the traffic is dropped.

Best regards,

Benoit