IPSEC VPN route publishing

[FransUrbo]

I have a FG50 (FortiOS v5.4) as my home firewall/gateway/nat as well as IPSEC VPN endpoint to get access to my home network.

The VPN works fine and all, but on the client (macOS Sierra), I don't get a route "in" to the VPN. I always have to add that manually.

And when I've done that, I have to use IPs to access my resources as home instead of using the DNS zone I've setup in FG.

[FransUrbo]

As far as I can tell, that's pretty much what I'm doing: http://bayour.com/misc/fortigate-vpn.txt. I put it in phaseX-interface instead of phaseX like you do. But the VPN works! It's just the routing on the road-warrior client that doesn't work/isn't set.