VPN IPSec configuration on Fortigate 90G

[KadiatouDiallo]

Hello,

I need help to configure IPsec VPN on my FortiGate.

I have created the users and configured the tunnel, but I can't access it via FortiClient.

I really need your help.

[dingjerry_FTNT]

Hi @KadiatouDiallo ,

You have to make sure that your FortiClient can reach your WAN interface.  

If your client can't reach your WAN interface, how can they connect to the VPN?

[KadiatouDiallo]

I'm currently unable to access it via the WAN interface.

I'm using FortiOS version 7.0.12.

[dingjerry_FTNT]

"I'm currently unable to access it via the WAN interface."

I am not clear about it.  What do you mean?

What I meant is, if your WAN interface has IP, say, 1.1.1.1, from your client, you should be able to Ping it (If you enabled Ping on the WAN interface) at least.

[KadiatouDiallo]

Yes, the WAN interface has an address, but I should point out that it's a private address: 192.168.100.X

[dingjerry_FTNT]

It has to be NATed with a public IP on one device (e.g., your ISP modem/router). When users access this Public IP from the Internet, this NAT device should know how to forward the traffic to your WAN interface.

If this IP is changing frequently, you may have to use a Dynamic DNS service.