Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
idomaret
New Contributor

FortiClient SSL VPN connection over Open VPN TLS

Hello, I have just set up my own Open VPN server on Mikrotik and do connect to it from MacOS client. I am redirecting all traffic.

Unfortunately, when I try to connect to Fortinet VPN it just hangs up in 'connecting' status and then throws 'connection error. request timed out' message.

If I disconnect from Open VPN session or change rerouting so that not all traffic goes through Open VPN, then Fortinet connection is fine.

I wonder what I can do in this case and why there is a conflict between these two VPNs. Is this expected or an edge case? Would Fortinet SSL work over other VPNs like IPsec or Wireguard (assuming I will route all the traffic via them)

Thanks in advance.

4 REPLIES 4
hbac
Staff
Staff

Hi @idomaret,

 

FortiClient might conflict with other VPN client. You can run packet capture and sslvpn debug to see if the traffic reaches the FortiGate when trying to connect over Open VPN.

 

Regards,  

idomaret
New Contributor

I do not have any access to FortiGate, I am just a client. But yes, from their side they say no activity is visible, so I assume that's the reason for timed-out message and Open VPN client somehow prevents Fortinet from initiating the connection.

Do you think that if the Open VPN client is a router that will assign my MAC an IP that would change everything as there will be no VPN Clients conflict on the device and Fortinet should be able to establish the connection?

idomaret
New Contributor

I have tested this on Windows..and you know, Fortinet established SSL connection just fine after I made a VPN tunnel with Open VPN. In network adapters Open Vpn and Fortinet do have 2 different adapters for each.

What does it mean, Mac Os limitations?

idomaret
New Contributor

Anyone, any thoughts on this? How to bypass this in macOS?

I have tried in Android, also no luck, but for Android there is info that only one VPN is possible, so that's expected. No info on this for Mac, so I assume it should be possible to have Fortinet over Open Vpn the same way as in Windows.

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors