Cannot ping from CLI to a host over VPN tunnel

[tetelu]

Hi,

I have two FortiGates and I created an IPsec tunnel between them via IPsec Wizard.

The VPN is working well, but I cannot ping from Fortigate B CLI to a host in the other network.

The ideea is that in network A I have a FortiAnalizer and I want to send logs from Fortigate B to it.

Please help!

Thanks!

Kind regards,

[Hosemacht · Accepted solution]

Hey there,

set fortigate self-originates traffic settings and you'll be fine:

https://help.fortinet.com...iginated%20traffic.htm

Regards

[tetelu]

Thanks Hosemacht!

Worked perfectly!

[ede_pfau]

That would be a nice feature request: most often, if no source IP is explicitely specified the LAN IP would be just fine, don't you think? Instead, the source address is chosen by some complicated, internal-only rumble mumble algorithm which I keep forgetting...