Hello! I have a question regarding IPSec VPN. There are 2 firewall, FortiGate 60F (site A) and 200F (Site B). The question is, do I need to configure IPSec VPN for routers in Site A and Site B if the router is either before or after the FortiGate firewall?
Solved! Go to Solution.
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Hello @Israt24Fortinet ,
If your FortiGate communicates (via internet or local connection) with each other you can configure the IPsec tunnel on FortiGate. No need to configure ipsec on your router.
Hello @Israt24Fortinet ,
If your FortiGate communicates (via internet or local connection) with each other you can configure the IPsec tunnel on FortiGate. No need to configure ipsec on your router.
Thanks for the response. Regarding IPSec where I configured, the problem I am facing is the 2 firewall can communicate (ping) but each of their LAN can not communicate with the firewall. Also IPSec VPN phase 1 is still down. I have followed all the documentation regarding configuration. Any thoughts on this like what could be the problem?
Hello @Israt24Fortinet ,
If your router acts like a nat device for your FortiGate. You need to configure nat traversal on your IPSec configuration. Or you need to configure dnat for udp/500 port on your router.
https://community.fortinet.com/t5/FortiGate/Technical-Tip-IPSec-VPN-nattraversal/ta-p/197873
IPsec configuration is not enough for Fortigate. You should configure route and policy on your FortiGate.
Also, you can find the troubleshooting step in this link.
https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-IPsec-VPNs-tunnels/ta-p/195955
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1547 | |
1031 | |
749 | |
443 | |
210 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.