GRE tunnel ExtraIP.com

[JesperV]

Hello,

I am trying to setup a GRE tunnel with ExtraIP.com. They provide a few documents about different firewalls, but not fortigate.

I've setup a tunnel with the following config:

config system gre-tunnel
edit "ExtraIP"
set interface "VLAN100" //VLAN 100 is my WAN connection from my provider
set remote-gw (REMOTE GW OF EXTRAIP)
set local-gw (MY PUBLIC IP)
next
end

config system interface
    edit "ExtraIP"
        set type tunnel
        set interface "ExtraIP"
        set allowaccess ping
        set alias "ExtraIP GRE"
        set ip (SECOND IP OF /29)/32
    next
end

When I check the diag sniffer with this command

diag sniffer packet wan1 "host (ExtraIP Gateway)" 4

I get only packets comming in, there are no packets going out

0.593645 VLAN100 in (ExtraIP GW) -> (My Public IP): gre: length 50 proto-800
1.929499 VLAN100 in (ExtraIP GW) -> (My Public IP): gre: length 70 proto-800

And when I assign port 443 via VIP and firewall policy to a linux server with nginx, I get ERR_CONNECTION_TIMED_OUT

Can anyone help me troubleshoot, I've been busy for over 2 hours without any luck

[JesperV]

I get the reverse path check fail when I visit the 122 ip in the browser which is linked via a VIP to a linux server that listens to 443. 

But the page doesn't load. What should I do?

[AEK]

As the client has a random public IP and you don't have such route through the tunnel, then I guess one possible workaround would be to NAT the traffic from on the ExtraIP side.