Unable to browse Dynamic DNS in Fortigate 80F

[Muhammad-Adeel]

Although I’ve successfully established an IPsec tunnel between our Head Office and Factory using the same DDNS, I’m still unable to access the Factory’s FortiGate 80F through it.

I am using internet from Mobily and STC 5G routers, enabled the DMZ in there...

Kinldy help ASAP.

[esalija]

Dear @Muhammad-Adeel 

To troubleshoot the issue of accessing the FortiGate 80F at the factory through the established IPsec tunnel, follow these steps:

1. Ensure that the IPsec tunnel is up and running. You can check the status on both FortiGates to confirm that the tunnel is active.

2. Make sure that the IP configuration on both ends of the tunnel is correct. This includes verifying that the DDNS is resolving to the correct IP addresses.

3. Since you mentioned enabling DMZ on the routers, ensure that the correct internal IP of the FortiGate 80F is set in the DMZ configuration. This will allow traffic to be directed to the FortiGate.

4. Check the firewall policies on both FortiGates to ensure that traffic is allowed through the tunnel. You need to have policies that allow traffic from the head office to the factory and vice versa.

5. Verify that the routing is correctly configured on both FortiGates. Ensure that there are routes that direct traffic through the IPsec tunnel.

6. If you are trying to access the FortiGate 80F for management purposes, ensure that the management access is allowed from the IP range you are coming from. You may need to set a specific source IP for management access.

7. Check the logs on both FortiGates for any errors or messages that might indicate what is going wrong. Use diagnostic commands to gather more information if needed.

Best regards,
Erlin