Multiple ipsec remote access vpn with single IP

[loicparker]

I have one fortigate 100E, one public IP

I have multiple subnet for multiple services

I done 3 Ipsec Remote acces VPN on it and each VPN reach a specific network.

My issue is that only one VPN is work, the two other throught an error

Thank you for your help

[Julien87 · Accepted solution]

Hello,

the remote access vpn is in dialup mode?

If yes you could use aggressive mode and peerID. You can read the detail in the follow link :

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-use-Peer-IDs-to-select-an-IPSec-dia... 

best regards,

[Julien87 · Accepted solution]

Hello,

the remote access vpn is in dialup mode?

If yes you could use aggressive mode and peerID. You can read the detail in the follow link :

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-use-Peer-IDs-to-select-an-IPSec-dia... 

best regards,

[Yurisk · Accepted solution]

What @Julien87  said is the only way to separate IPSec dial up clients into different security rules. Users in their Forticlient will have to set their specific Peer ID (just  a string) and it will work seamlessly, tested in real life.

[loicparker]

Thank you @Julien87 @Yurisk , i solve my problem