Routing between vpn tunnels

aresblade · ‎11-27-2024

Hi all

I have this problem

i have 2 vpn tunnels on one Fortigate the external interface is wan1 for both

vpn1 --- interface ---wan1

vpn2----interface-----wan2

both vpn are working and i can reach a vm on both sides from the lan interface

lan ---- vpn1-----ok working. vm1 ping

lan----vpn2--------ok working vm2 ping

now i have on both vpn ends a vm i need to connect vm1 to vm2

vm1 ping fortigate lan interface

vm2 ping fortigate lan interface

i cannot ping vm1 from vm2 and viceversa

i have setup routing and firewall policies, maybe i miss something

please help

thanks

sjoshi · ‎11-28-2024

On fortigate on prem

0.195505 gcplab in 10.20.0.2 -> 172.16.4.4: icmp: echo request
0.195534 AzureFGT out 10.20.0.2 -> 172.16.4.4: icmp: echo request >> the traffic is leaving out of the tunnel interface

but the same icmp request is not being received on the azure FGT end

can you verify quick mode selector is correct?
it could potential be esp block on the ISP side

If you have found a solution, please like and accept it to make it easily accessible to others.
Fortinet Certified Expert (FCX) | #NSE8-003459
Salon Raj Joshi

View solution in original post

aresblade · ‎11-28-2024

Yessssss

thank you, that was the problem, finally resolved the issue.

Cheers

Routing between vpn tunnels

Nominate a Forum Post for Knowledge Article Creation

You are leaving our website