FortiGate IPsec on MPLS links

[AhmadYousef]

Hello,

Can fortiGate create IPsec tunnel on MPLS link with the following scenario:
FortiGate will be behind a WAN FW , the WAN firewall will be connected to MPLS ISP circuit.

[Toshi_Esumi]

It's depending on reachability each other between the MPLS interface IP and the detination IP on the opposite side over the MPLS network. Config wise, you can build an IPsec tunnel on any interfaces on a FGT.

Toshi

[AhmadYousef]

Thanks @Toshi_Esumi 

[Rajneesh]

Hello @AhmadYousef 

To create the IPSEC tunnel all matters is the reachability of the peer as mentioned by the @Toshi_Esumi .

Also you mentioned that your Local FortiGate is behind the WAN router so make sure that the IPsec VPN Nat traversal is enabled when doing the configuration.

For IPsec VPN Nat traversal you can refer the KB to understand its usage.

[AhmadYousef]

Thanks @Rajneesh