only one VPN client can establish connection at one time

[#1]

We are currently using the Kerio Firewall 6.x to connect to the remote site using the Fortigate 100A. However, only one VPN client (forticlient v1.2.04) can connect to the VPN gateway at one time. The other workstation will fail to established the VPN connection. We set the outbound rule as follows for the VPN connection: Sources Destination Services allow Translation ------------- --------------- ------------------------ ----------------- internal IPs VPN gateway UDP 500, UDP 4500 NAT to WAN IP In the Fortigate 100A VPN gateway, we set the encryption rule with dial_up VPN gateway and place the rule at the top of the firewall policies. Thx

[UkWizard]

Or you could try agressive mode mode and use peerid with multiple dialup vpn rules (one for each peerid). Never tried this personally though, idea above is better. Also remember that every site would need its own individual IP subnet, otherwise it gets really messy and needs to be a site-to-site confg.

[#3]

hello, nearly the same problem here. forti100 with static IP, about 30 forti50A' s with dynamic IP' s. on the forti100 the first dialup-tunnel works fine. all others are getting a connection for about 1-30 seconds, then the connection is lost. log: " delete IPSEC..." misterious: it works fine for about 8 month. last softwareupdate 2 month ago. problem since yesterday...

[#4]

hello, found the problem for my forti100... solved.

[#5]

Hi Mr. Andy Neutatz, I am FG reseller in Malaysia. Myself also encountered this problem as yours before in my customer site and unable to resolve it. If is great to learn that you could overcome this problem eventually. Would you mind to share with me how you can resolove this problem? Thanks in advance. CK Chew Malaysia

[#6]

Can you provide more information? As not all problems are the same...

[#7]

Hi all, i am the original sender of this message. I have solved this problem by disabling the IPSEC traffic of my current firewall. Now i have have more than one VPN client connect to the remote site. Regards.

[#8]

Hi Sir, Sorry I don' t get your message right. You are saying to disable the IPSEC traffic in the firewall, but how to do this? Is it disable the IKE service in the firewall policy (Internal to External, Encryption policy)? Thanks in advance. Chew

[#9]

yes, not all firewall are the same. here i attached the pciture for my firewall setting that disable the IPSEC passthrough. After I unclick this option (IPSEC passthrough), the VPN clients work fine.