Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
NetFire
New Contributor

L2TP - static IP

Hello,

 

there's some way to avoid auto IP assign on L2TP connection (without IPSec)?

 

I know, it's an old and unsecure choose, but I need it for specific purpose.

 

My HW:

Fortigate 30E

FortiOS v6.2.1 build0932 (GA)


 

 This is my config:

config vpn l2tp
    set status enable
    set usrgrp 'l2tp_usrgrp'
    set sip 10.100.0.70
    set eip 10.100.0.80
end

 

So I added

[ul]
  • IP Range (called l2tp_iprange) on Firewall->Object
  • IPv4 Policy -> From WAN to LAN -> From l2tp_iprange to LOCAL_SUBNET[/ul]

    And all works fine. But .... IP is choosen by Fortigate.

     

    My need is to choose the IP from the client side, like a static IP settings.

    I tried to do it from the L2TP connection settings on Windows, if I try to force the static IP, but the connection is not completed.  The connection is not completed immediately after the (positive) verification of the credentials

     

    There's a way to "tell" to Fortigate "I choose IP by myself"?

     

    Thanks

     

     

  • 0 REPLIES 0
    Announcements

    Select Forum Responses to become Knowledge Articles!

    Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

    Labels
    Top Kudoed Authors