add additional network to site-to-site VPN

[qrz]

Hi,

We have site-to-site VPN tunnel to remote office with Fortigate VM64 on remote end, everything was worked ok. I need to add additional network (mobile VPN), from which remote office must be accessed also. I did changes (added network and policies) on both sides, but mobile VPN traffic still drops somewhere on Fortigate side. I can only see through packet capture, that packets are coming to Fortigate. What else I can do for debug the problem? Sorry, I'm not a Fortigate guru.

[leszek · Accepted solution]

routing? did you add a route on remote fgt to mobile vpn via site-to-site vpn? if not you should do this.

L

[qrz]

Yes, that was routing issue. Needed to add a static route for this.