Hello,
I am trying to configure my home FortiGate 40F as an L2TP client. I have followed the steps in the official Fortinet technical article, but the connection is not working as expected. I would like to ask for help with the following points:
1.Are there any additional configuration steps needed beyond the guide?
2.How do I properly configure L2TP with an IPsec pre-shared key (PSK) using the CLI? Where should I enter the PSK?
3.When I run diagnose vpn l2tp status, it shows “disable.” What could be the reason?
4.After setting up the L2TP client, are there specific firewall policies, NAT, or routing configurations required for proper connectivity?
Here is my current configuration:
config system interface
edit "wan"
set status up
set l2tp-client enable
set l2forward enable
config l2tp-client-settings
set auth-type auto
set defaultgw enable
set mtu 1460
set user <user_name>
set password <password>
set peer-host <host_IP_address>
set peer-port <port>
end
Thank you very much for your support.
Best regards,
Shine Htet
hi,
1. the guide should be enough. no 'hidden' or extra settings as far as i know are required.
2. here
3. all described / required by your config only
User | Count |
---|---|
2551 | |
1356 | |
795 | |
646 | |
455 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.