I am new to Forum an I hope someone can help me.
I have two Fortigates connected via IPSec.
On site A, I have a Server with internal IP 192.168.1.254 and external ip 188.8.131.52 on wan1.
I created a VIP:
config firewall VIP
set extip 184.108.40.206
set extintf "wan1"
set mappedip "192.168.1.254"
I created a Policy that allows Port 443 from the Internet. works fine.
My Problem is: I want, that VPN Site B is able to connect to RDP (TCP 3389) over the PUBLIC IP 220.127.116.11 using the IPSec Tunnel instead of using 192.168.1.254
All I can see in Debug is: msg="pre_route_auth check fail(id=0), drop"
Can someone help me?