Make VPN site to site and show only 2 ip

[HiGio]

Hello

it's possible to make this vpn and the guest can see only 2 Ip of the local lan? I have FortiGate 60E

Thanks

[msolanki]

Hi HiGoi,

Not understand your query but if you want to create ipsec site to site VPN and want to use only two LAN IP then you can mentioned them in phase 2 with specific subnet.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-configure-VPN-Site-to-Site-between/...

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Configuring-Site-to-site-IPSec-VPN-in-Cent...

[HiGio]

Hello, thanks for your reply.

I need that from the other side of vpn they can see only a server and a printer and not all lan.

Thanks

[msolanki]

Hi HiGio,

You can restrict in policy also mean the side were printer and server hosted you can configured only these two IP in destination of firewall policy so when other side user access any other IP policy will get dropped it.

[HiGio]

Thanks for your reply. So can i restrict from the vpn wizard (see the image) add the 2 ip or i must create a new IPv4 Policy?

Thanks for your help