Help
Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Christian_89
Contributor III

Created on ‎07-03-2022 05:09 AM

VIP from Forti to Forti over WAN

Hello everyone

I have the following problem
On page A I have a Foritgate with incoming traffic.

Now the problem is the SRV's are on Fortigate side B.

There is another IPSEC tunnel between the two Fortigates.

How exactly do I have to configure the VIP there.

Many thanks for your help

Labels:
692
0 Kudos
1 Solution
akristof
Staff
Staff

Created on ‎07-03-2022 11:33 PM

Hi.

If your topology is Client > Internet > FortiGateA > Ipsec > FortiGateB > Server then you have option to configure VIP on FGTA or FGTB. It depends on external IP address, if this IP is known to FGTA, for example its own public IP address, then configure VIP on this device. You also need to make sure that Ipsec tunnel has correct selectors configured.

Adrian

View solution in original post

678
0 Kudos
1 REPLY 1
akristof
Staff
Staff

Created on ‎07-03-2022 11:33 PM

Hi.

If your topology is Client > Internet > FortiGateA > Ipsec > FortiGateB > Server then you have option to configure VIP on FGTA or FGTB. It depends on external IP address, if this IP is known to FGTA, for example its own public IP address, then configure VIP on this device. You also need to make sure that Ipsec tunnel has correct selectors configured.

Adrian
679
0 Kudos
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors
View all
Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Social Media
Security Research
Company
News & Articles
Contact Us

Copyright 2024 Fortinet, Inc. All Rights Reserved.