spoke communication route and policybased

[rickards]

Is it possible to enable spoke to spoke communication if both spokes are connected to a hub which is is NAT/Router mode and one spoke is in transparent mode and one spoke is an software client. If possible how do i tell the hub to route certain traffic from the software client over the policy based tunnel ? Spoke1=software ipsec vpn in interface mode Spoke2=Policy based ipsec tunnel, Fortigate in transparent mode Hub=Fortigate in NAT/Router mode Thanks

[emnoc]

Question: how can a FGT being in transparent mode and then be part of a VPN/ipsec spoke? Do you have a diagram of the design?

[rickards]

I was a bit fuzzy in my explanation, software ipsec clients needs to get access to servers behind fgt1. The software clients only supports ipsec in interface mode, therefore i configured fgt2 as concentrator. Is it possible to route traffic from sw clients to servers ? One solution to this problem is also to reconfigure fgt1 in nat mode, however this is not trivial since it requires ip change on servers.