Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
cahoots18
New Contributor

Can't use local server while Forticlient VPN is running

I'm using Forticlient 6.2.6.737 (free version) and I have an issue. When Forticlient is running, I can't use a local server/client connection (the specific setup is detailed at https://docs.bazel.build/versions/master/guide.html#client/server ). How might I fix this?

2 REPLIES 2
Dave_Hall
Honored Contributor

How is the Forticlient connecting to the VPN?  SSL? IPSec?  I believe Split DNS is needed here and need to specific the domains to be resolved locally. 

NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C

NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C
ede_pfau

What @Dave really meant (I'm sure this was at the end of a 15 hour work day) is that you need split routing (*).

 

This means that you specify in FortiClient the subnet address of the network behind the tunnel. If you don't, FortiClient assumes that all networks are behind the tunnel, and forwards all traffic into the tunnel, even traffic to a local host. For you it seems that your local LAN is cut off.

 

You find split routing in FC settings. After enabling it, you will be prompted to input the remote subnet. The other side of the tunnel does not need to be reconfigured for this.

 

(*) addendum on re-thinking:

now, it could really be that if split routing is in place, you still have difficulties with contacting local hosts using their name. While FC is running, the PC is using the DNS (nameserver) which is specified in it's settings. And that might be a DNS on the remote subnet which doesn't know about local names. Then you would actually need either split DNS, or you use IP addresses instead of names to address your local hosts.

Ede Kernel panic: Aiee, killing interrupt handler!
Ede Kernel panic: Aiee, killing interrupt handler!
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors