Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
New Contributor

L2tp and lan

Hi all.

I have an annoying setup, where an l2tp client (a server machine) using native windows L2tp/IPsec client connects to the customer's office. The problem is, that customers' LAN is, the server's IP is Naturally I cannot simply reach the server .20, since the LAN devices think that it is in the same broadcast domain, and do not turn to default gateway(, flooding ARP requests instead. I cannot change the LAN network settings on the customer's side (e.g. narrow down the subnet). Also I cannot change the IP address for an L2TP client on the other side. Adding a static route to via works, but it is also not an option, since there are quite a few devices on the network, and we do not have control over most of them.


To this moment I've tried configuring policy route, enabling ARP-proxy.. Now I am trying to investigate if I can NAT the communication between LAN and .20 over .1 

Does anyone have any other options?

Honored Contributor

there is a kb documenbt about this:


this is for 7.2 but I had that working in 6.x too some time ago.


"It is a mistake to think you can solve any major problems just with potatoes." - Douglas Adams

-- "It is a mistake to think you can solve any major problems just with potatoes." - Douglas Adams
New Contributor

Thanks for the KB, in my case, my server machine is looking at the internet directly, and directly connects to the Fortigate via windows native client, on the other side. So, basically I  have only one half of the setup described. But, it's worth giving a try. Maybe I will work something out with tambourines and ping summoning dances :D

Top Kudoed Authors