IKEv2 pass though not working

[ajtsystems]

Hey,

I need some help getting my always on VPN working through our Fortigate.  It's just not working.  I have a Virtual IP mapping a public ip address to the internal address of a Windows RRAS server running the VPN.  I also have a firewall policy allowing IKE, which is UDP/500 and UDP/4500 - the ports that the VPN client uses for IKEv2 certificate authentication.

The VPN works when clients behind the firewall connect but when passing though it's failing.

I've logged a ticket with Fortigate support but I havent spoken with them yet.

Is there some documentation on allowing IKEv2 through the Fortigate to a VPN server behind it?  I've looked but cannot find anything

Thanks :)

[FortiMax_it]

Hi, try this: https://zedt.eu/tech/windows/how-to-connect-windows-to-ipsec-vpn-server-behind-nat/ 

In my case it had worked. 

[ajtsystems]

Gave it a god but it doesn't seem to work.  I have a case open with Fortigate!