Forticlient

[aresblade]

Hi,

if  I have a pc with forticlient that connects to a vpn in a Client to Lan configuration, can others pc in the forticlient pc network connect to the vpn using the forticlient pc as gateway? without setting up a site to site?

Thanks

[sw2090]

once the first client has established the VPN and gotten its routing up, this is more a matter of routing between this pc and the other pcs. The others then need to either have a (persistent) static route for the subnet(s) behind the vpn with the Forticlient PC as gateway and the Forticlient PC has to forward the traffic over the vpn. Or they need to have the forticlient PC as default gateway plus routing/forwarding as above - in this case also all other traffic that is not on their own subnet will flow over the Forticlient PC.

FortiClient dial up tunnels btw are concurrent. So multiple Clients can dial into one Tunnel on a FortiGate. I think it allows up to 1000 per default. Each client gets its own connection then byond that tunnel and the FGT still threads it as one for policies etc.