SSH L2TP

[jbcastillo]

Good day, team,

I have a question. I am currently implementing an SSL VPN and an L2TP VPN on a FortiGate 200F. My question is: can I use the same user group and the same IP address pool for both, or what would you recommend?

[Mrinmoy]

Yes, you can use the same group and IP range but better to use different IP ranges for both connections to keep the traffic separated.

[jsauer]

I thought the recommendation was to NOT use the same IP ranges because the two processes that provide the addresses don't talk with each other and could cause an IP Address conflict between two inbound connections (one SSLVPN, one L2TP VPN). There was a support article on here not that long ago about this topic, IIRC.