- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
dialup ipsec VPN + many interfaces/subnets
Dominik Weglarz, IT System Engineer
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Dominik Weglarz, IT System Engineer
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
The most expensive and scarce resource for man is time, paradoxically, it' s infinite.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Dominik Weglarz, IT System Engineer
Created on 11-05-2009 11:44 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Dominik Weglarz, IT System Engineer
Created on 11-11-2009 12:30 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Dominik Weglarz, IT System Engineer
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
UP this topic, same subject but with Forti OS 5.6 and Forticlient 6.
Thanks !
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
the most easiest way might be:
have policies that allow traffic from the subnet you use for connecting your ipsec (client ip).
then on the dial up tunnel:
if you created it with the wizzard you must convert it into a custo tunnel to have all the options.
Then enable mode config and split tunneling and set that to an address group containig all the subnets you need.
With that FortiClient will not touch your default route but give you a net route over your tunnel vor any of them subnets in the above address group. With the policies you can access them then.
Works fine here since 5.4.x and up to 6.0.8.
--
"It is a mistake to think you can solve any major problems just with potatoes." - Douglas Adams