I have a 90D fortigate and in my network a FemtoCELL device used to increase smartphone coverage.
This device makes an IPsec VPN connection to the mobile operator's servers.
The problem is that it does not connect behind the Fortigate, but behind the ADSL modem it works perfectly.
Using the sniffer for on the source IP and for the IP destinations I a see the connections coming out of the FG but not coming in.
830.035152 LAN in 192.168.0.93.50124 -> 22.214.171.124.123: udp 48
830.035429 wan1 out 192.168.25.12.50124 -> 126.96.36.199.123: udp 48
830.035562 LAN in 192.168.0.93.50124 -> 188.8.131.52.123: udp 48
830.035761 wan1 out 192.168.25.12.50124 -> 184.108.40.206.123: udp 48
Only connection to NTP port exits and it should pass more UDP ports.
The firewall rule is very simple and without the use of packet filtering.
config firewall policy
set name "Allow_Femtocell"
set uuid 09ae009a-6ddc-51e9-a649-cead6848e003
set srcintf "LAN"
set dstintf "INTERNET"
set srcaddr "IP_FEMTOCELL"
set dstaddr "all"
set action accept
set schedule "always"
set service "ALL"
set logtraffic all
set nat enable
I can not figure out where the problem is to cause the connection to hang.
Ports default the Femtocell:
UDP 123 (NTP)
UDP 500 (IKE)
UDP 50 (re-mail-ck )
UDP 51 (la-maint)
UDP 4500 (IPSEC)
UDP 53 (DNS)
UDP 67 (DHCP) Bootps
UDP 68 (DHCP) Bootpc