L2TP policy-based and internet browsing

[neurotyp]

Hi guys,

I have setup l2tp ipsec vpn (http://cookbook.fortinet.com/l2tp-ipsec-vpn-on-fortigate/), clients are connecting but they dont have any internet browsing.

Its is possible to setup policy to allow this traffic ?

Can you show me an example or different solution.

regards

Chris

[neurotyp]

For internet browsing its required  route-based setup ?

[MikePruett]

I prefer Interface based tunnels in situations like this as well. Then you can do split routing and have their internet go out their local pipe or non-split tunnel (requires a policy from IPSEC tunnel interface to internet interface for traffic to flow out)

[iTrend]

Hi,

route prescribed on the client? (Route add x.x.x.x mask x.x.x.x y.y.y.y)