Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
EricS
New Contributor II

Redirect Fortigate traffic into tunnel

Hello,

Two Fortigate are linked by an IPSec Tunnel. LAN traffic passes well through the tunnel, but the fortigate cannot communicate with a syslog server located on the other site. How to specify to sent this local traffic into the tunnel ?

2 Solutions
AEK
SuperUser
SuperUser

Hi Eric

Check phase 2 selector if it includes the FG sending IP address as well as syslog server address.

After that check with diag sniffer command on both FG nodes if the syslog traffic is correctly flowing through the tunnel.

AEK

View solution in original post

AEK
hbac

Hi @EricS,

 

To connect to a syslog server over IPsec tunnel, you need to specify the source-ip. Please refer to https://community.fortinet.com/t5/FortiGate/Technical-Tip-Syslog-server-over-IPSEC-VPN-and-sending-V...

 

Regards, 

View solution in original post

5 REPLIES 5
AEK
SuperUser
SuperUser

Hi Eric

Check phase 2 selector if it includes the FG sending IP address as well as syslog server address.

After that check with diag sniffer command on both FG nodes if the syslog traffic is correctly flowing through the tunnel.

AEK
AEK
EricS
New Contributor II

Thanks for your fast answer. The phase 2 contains the site LAN Subnet and the SSLVPN subnet.

I launched the sniffer, the traffic is sent from the public IP.

 

9.270438 8x.xxx.xxx.x3.24957 -> 192.168.xxx.20.514: udp 941
9.270502 8x.xxx.xxx.x3.24957 -> 192.168.xxx.20.514: udp 1317
9.270545 8x.xxx.xxx.x3.24957 -> 192.168.xxx.20.514: udp 1028
9.270581 8x.xxx.xxx.x3.24957 -> 192.168.xxx.20.514: udp 941
9.270626 8x.xxx.xxx.x3.24957 -> 192.168.xxx.20.514: udp 1272
9.270662 8x.xxx.xxx.x3.24957 -> 192.168.xxx.20.514: udp 941
9.270700 8x.xxx.xxx.x3.24957 -> 192.168.xxx.20.514: udp 1134

 

Can I add ine the new selector the public IP as Local address and the xxx.20 IP as remote ?

hbac

Hi @EricS,

 

To connect to a syslog server over IPsec tunnel, you need to specify the source-ip. Please refer to https://community.fortinet.com/t5/FortiGate/Technical-Tip-Syslog-server-over-IPSEC-VPN-and-sending-V...

 

Regards, 

AEK

Instead of adding public IP, specify the private source IP as shared by @hbac 

AEK
AEK
EricS
New Contributor II

Thanks @hbac and @AEK  for your help, it works fine :)

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors