Cannot use Dial-up Client and Site-to-Site at the same time?

fionaC · ‎09-19-2022

I have a site-to-tunnel to a remote office. I also have a dial-up tunnel to that office. The site-to-site is used as primary, but there is one system we need to use the Dial-up client w/split tunnel for. This has always worked until recently. I am not sure if it is an issue with 7.2. The problem we have now is if the site-to-site tunnel is up, the FortiClient dial-up does not work. It I take down the site-to-site tunnel, it works. Is anyone else seeing this kind of behavior where you cannot use both?

jintrah_FTNT · ‎09-20-2022

hi,

Did you try setting up a unique peer id for the dialup since both tunnels would use the same wan IP? Technical Tip: Use of PeerID and LocalID in IPsec ... - Fortinet Community

Best regards,

Jin

fionaC · ‎09-21-2022

Yes, that makes no difference. It appears the Fortigate on one side is dropping the traffic.

Toshi_Esumi · ‎09-21-2022

You need to share significant portion of IPSec config (phase1-interface and phase2-interface in CLI) for both site-to-site and dial-up at the head-end and site-to-site at the remote FGT so that somebody can comment on what might be the cause.

Toshi