As my posted before, we replaced the firewall on Shanghai office to Fortigate 60B and it used two dynamic PPPoE DSL for internet and VPN connection. Everything works smoothly but we found that the VPN tunnel can't create automatically and needs traffic triggered by dialup side to create the VPN tunnel. The tunnel can't be created by dialup server. It means that if users behind of dialup server and need to access to the resource behind of dialup client but VPN tunnel is not created, the access will fail. It is annoying.
To solve this issue, we need to enable auto-negotiate on Fortigate dialup client side through CLI mode.
Please refer the example configuration as below:
========================================
config vpn ipsec phase2
edit "VPN_IKE"
set auto-negotiate enable
set keepalive enable
set phase1name "VPN"
set proposal aes128-sha1
set dhgrp 1
set dst-subnet 192.168.11.0 255.255.255.0
set src-subnet 192.168.22.0 255.255.255.0
next
end
========================================
After enable the auto-negotiate function on phase2 IKE, the VPN tunnel can create automatically and I don't have to worry about users can't access to remote resource through VPN tunnel.
Yes that's perfect/
ReplyDeletevpn encryption
Thank you, enjoy it!!
ReplyDeleteThis is highly informatics, crisp and clear. I think that everything has been described in systematic manner so that reader could get maximum information and learn many things. our blog
ReplyDeleteUbuntu is an extremely well known working framework for workers, and when you're hoping to set up your very own VPN that runs one of the numerous varieties of the working frameworks accessible today, at that point I firmly suggest that you see what Open VPN can make feasible for you.frizbox
ReplyDeleteECOGRA is the word on responsible playing and protects players towards unfair practices. If you like to download free games to your gadget, you'll be able to|you possibly can} download them instantly from on-line casino sites, as part of of} their downloadable casino suite. Another popular choice is to download apps 텐벳 from the App Store or Google Play for cellular play. It couldn’t be easier to play one of the best free on-line casino games on our website. Just click the sport you wish to play, and it will then launch on your display straightaway.
ReplyDelete