Want To Create an VPN between 2 Fortinet of Two diffrent place.

[umarashraf]

Hi EveryOne,

I need little help on following.

I have two location Location A in NY, USA and Location B in Pakistan. Both location have Fortinet firewall with dedicated Ip Addres. 

Actually I want to use USA Location Internet Like when I will go my web browser and search what is my IP that is always show internet location Of NY, USA Office. In simple words I want to use NY, USA office resources. what configuration I require to connect two diffrent places.
Please Help on this.

Regards,
Umar Ashraf

[AEK]

Hi Umar

You can create a site to site VPN with the wizard. It is simple and secure.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-configure-VPN-Site-to-Site-between/...

Hope it helps.

[umarashraf]

Thankyou , 

But please confirm through this way I am able to restrick the specific location.when I will go my web browser and search what is my IP that is always that specific location internet.

[AEK]

Yes I confirm. When you visit "What is My IP" on the Web you will see NY''s IP even if you are in Pakistan.

[Dhruvin_patel]

Greetings!

One important step, once the VPN tunnel is established, configure the routing on the Pakistan Fortinet firewall to route all internet traffic through the VPN tunnel to the New York Fortinet firewall.

You need the following routes:

1) Route that will be used to establish the tunnel

config router static

edit 0
set dst x.x.x.x 255.255.255.255
set gateway y.y.y.y
set device "Outgoing wan interface"
next
end

x.x.x.x is New York FortiGate IP, which actually used as a remote IP in tunnel configuration on Pakistan FortiGate.
y.y.y.y is a gateway IP, next hop IP.

2) Default route to send the Internet traffic through the IPSec tunnel.

config router static
edit 0
set device "tunnel interface"
next
end

Note: without the first route, the tunnel will not come up.

Regards!

If you have found a solution, please like and accept it to make it easily accessible for others.