Establish multiple IPsec VPN remote access via single WAN on FG

[ITDSS]

Hi there,

I want establish two ipsec vpn remote access tunnels with different vlans for admins and users via single WAN on fortigate 70G. its possible? thanks for answers

[funkylicious]

hi,

have a look at, 

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-use-Peer-IDs-to-select-an-IPsec-dia... 

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Use-of-PeerID-and-LocalID-in-IPsec-VPN-bet... 

for IKEv2 you would need EMS in order to set local id in FCT, if i recall correctly.

[ede_pfau]

For IKEv2, have a look at this recipe:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Using-Local-ID-for-easier-identification-o...

From FortiClient v7.4.4 on, IKEv1 is no longer supported (as mentioned in the forum these days). So, a change to IKEv2 is due anyway.