Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
New Contributor

Route everything through DialUp VPN with DHCP WAN address

Problem I need to design with a Fortigate at HQ terminating DialUp IPsec VPNs from Fortigates at branch offices. All user traffic from the branch offices should be routed through the VPN tunnel to HQ, and then to internet.

With a static IP on the WAN interface of the branch gates, this is easily accomplished by adding a static host-route (/32) to the HQ Peer IP thorugh the WAN gateway, and then add  a default route ( point to the DialUp VPN interface.   However, if the branch offices have DHCP assigned WAN interfaces - How can I accomplish this? As we don't know the gateway IP in advance we can't add the static host-route to the HQ gate and I don't want to rely on updating this static route manually if the DHCP gateway changes.

Hope you guys could give me a solution, many thanks!


See above cookbook. It's a little more complicated than you need (there are two HUBs) but it includes all you need.

New Contributor II

I am looking for solution of this issue too. But there is not in the URL link. There is static ip address of WAN interface only, not DHCP.

Would anyone know how solve this problem?



Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Top Kudoed Authors