Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Christian_89
Contributor III

VIP from Forti to Forti over WAN

Hello everyone

I have the following problem
On page A I have a Foritgate with incoming traffic.

Now the problem is the SRV's are on Fortigate side B.

There is another IPSEC tunnel between the two Fortigates.

How exactly do I have to configure the VIP there.

Many thanks for your help

1 Solution
akristof
Staff
Staff

Hi.

If your topology is Client > Internet > FortiGateA > Ipsec > FortiGateB > Server then you have option to configure VIP on FGTA or FGTB. It depends on external IP address, if this IP is known to FGTA, for example its own public IP address, then configure VIP on this device. You also need to make sure that Ipsec tunnel has correct selectors configured.

Adrian

View solution in original post

1 REPLY 1
akristof
Staff
Staff

Hi.

If your topology is Client > Internet > FortiGateA > Ipsec > FortiGateB > Server then you have option to configure VIP on FGTA or FGTB. It depends on external IP address, if this IP is known to FGTA, for example its own public IP address, then configure VIP on this device. You also need to make sure that Ipsec tunnel has correct selectors configured.

Adrian
Labels
Top Kudoed Authors