Re: Dial-up IPsec tunnels with same source subnet ...

mpatel · 04-17-2024

Use a console connection. OR Factory Reset the Fortigate using the reset button.

mpatel · 04-17-2024

Awesome!! I am glad to hear that this resolved your issue. Hope you are now confident in implementing this in Production.

mpatel · 04-17-2024

Intrigued!! Can you configure "set netdevice enable" on the server end FGT IPSEC tunnel Con1. This will cause the fortigate to create a virtual interface for all incoming IPSEC connections. Keep ecmp mode as source-dst-ip-based and test.

mpatel · 04-16-2024

If your config is as I have mentioned then this behavior is due to default ECMP (source-ip based) and is expected. https://docs.fortinet.com/document/fortigate/6.2.16/cookbook/25967/equal-cost-multi-path. https://community.fortinet.com/tpykb84852/att...

mpatel · 04-16-2024

Great. Lets see what you get when you modify the client FGT IPsec config.

User Statistics

User Activity

Re: New FortiGate 60F- Assigns me IP but http://192.168.1.99 times out

Re: Dial-up IPsec tunnels with same source subnet - unexpected server routing

Re: Dial-up IPsec tunnels with same source subnet - unexpected server routing

Re: Dial-up IPsec tunnels with same source subnet - unexpected server routing

Re: Dial-up IPsec tunnels with same source subnet - unexpected server routing

Re: Dial-up IPsec tunnels with same source subnet ...

Re: Connect Fortigate to internet with 2 ISP route...

Re: Dial-up IPsec tunnels with same source subnet ...

Re: Connect Fortigate to internet with 2 ISP route...