I'm trying to configure custom configuration for dialup forticlient on windows, in phase1-interface I have configured "mode-cfg : enable" and "ipv4-name : ipsec_range" this ipsec ip range have adresses from 192.168.30.1-192.168.30.2. Now when server connects to fortigate it gets address 192.168.30.1 and gateway is 192.168.30.2 so this is wrong order, also in ip configuration of this forticlient connection I see that dhcp is enabled with dhcp server 192.168.30.2 how to disable this dhcp?
All I need is to have server at 192.168.30.2 with gateway 192.168.30.1
There is nothing wrong with the IP address assignment, by design the first IP address from the pool (range of IP address) will be assigned to the client connected. By default, the first-available address assignment method is still used.
As you are using a range of IP addresses for the client connected to the VPN, then a scope is created and will be maintained by FortiGate. It is a must to maintain the scope and determine which IP address has to be assigned and which is already assigned.
The problem is that users from Fortigate LAN will be accessing this server that is connecting using Forticlient, so I need to be sure that this server have all the time the same ip address. I read your linked topics about ip reservation, but I have question if there is only one server that is connecting to fortigate can I modify ipsec ip address range on fortigate to 192.168.30.1-192.168.30.1 so server will getting always this one ip?
Yes, dialup VPN works with only one IP address for the range, but anyway, if you will use this VPN only for one machine, by design will get always the first IP address of the scope added to the VPN configuration.
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.