Fortigate IPSEC tunnel allow gateways to communicate

nsumner · ‎02-12-2017

I want to set the DNS on my fortigate to the interal DNS in a second site. But although I have a working IPSEC VPN tunnel the fortigate itself is unable to access the remote subnet. How can I resolve this issue?

rwpatterson · ‎02-12-2017

Open a policy on the remote tunnel that allows the interface IP into the DNS server. The FGT comes across with that IP, not the LAN on that unit.

HTH

Bob - self proclaimed posting junkie!
See my Fortigate related scripts at: http://fortigate.camerabob.com

MikePruett · ‎02-13-2017

Yeah, sounds like a policy issue (if the tunnel is actually building properly)

Mike Pruett

Fortinet GURU | Fortinet Training Videos