Native l2tp ipsec remote access vpn

[rezafathi]

Hi

We have some remote users with windows 7 and forticlient vpn app does not install on windows 7. I created a native l2tp vpn tunnel, it created 2 firewall policies automatically. I also want to have split tunneling enabled. When they connect via this tunnel, they can not connect to our internal network nor internet. What should i do to have access to internal networks and internet at the same time? Thanks.

[ozkanaltas · Accepted solution]

Hello @rezafathi ,

You can review this document. This way should work.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Split-tunneling-on-L2TP-IPSEC-VPN-between/...

[hbac]

Hi @rezafathi, 

When connected to the VPN, you need to check your routing-table 'route print'. Also make sure you have firewall policy to allow the traffic to internal network. If you have proper routes, you can run debug flow on FortiGate to see if traffic is being dropped. https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-First-steps-to-troubleshoot-connecti...

Regards, 

[rezafathi]

Thanks. On windows i can not select mschapv2. Only pap works. Why?