Dial-Up VPN Setup WITHOUT Static IP! | FortiGate Configuration Guide

Поділитися
Вставка
  • Опубліковано 4 гру 2024

КОМЕНТАРІ • 28

  • @staticroute
    @staticroute  7 місяців тому +1

    Dialup VPNs are useful where remote branches have no fixed ip address, such as LTE, etc…I hope you find the video useful and as always, I’m curious to know how many people are using Dialup or intend using dialup VPN

    • @hakim0109
      @hakim0109 3 місяці тому

      I want to use this VPN dialup but between two Fortigate, so I have in my remote site, a FG-80F and in this FGT I have ISP WAN 1 & WAN 2, and I want to build two IPsec Tunnels in Dialup that connects to the central Fortigate, but I can't do it. what do u think , it's possible ?

    • @johnvoegeli5705
      @johnvoegeli5705 Місяць тому

      @@hakim0109 Build out the 2 VPN tunnels (You'll need a second IP on the HUB device as the remote will complain about duplicates) Then use SDWAN feature to decide which tunnel to take ie: when packet loss occurs on WAN1 use WAN2 etc.

  • @ryancheungkkable
    @ryancheungkkable 5 місяців тому +1

    Will use it in our production environment soon

  • @MuhammadImran-xu4fw
    @MuhammadImran-xu4fw 7 місяців тому +1

    Again very helpful. Thanks.

  • @danielcampbell6059
    @danielcampbell6059 4 місяці тому +1

    Can you explain what the purpose of creating the user and group on the HUB, if there its not entered anywhere on the spoke routers?

    • @staticroute
      @staticroute  4 місяці тому

      This config is not as straight as one would hope, but the spokes do use their hostname/local-id as username and the PSK as the password. It' not a simple username|password combination..check it here: docs.fortinet.com/document/fortigate/7.4.4/administration-guide/6896/fortigate-as-dialup-client

  • @swissactiontv5128
    @swissactiontv5128 5 місяців тому +2

    I have similar situation, but i have the problem, that with 2 Peers, only one stay online, second is disconnected, if other shows activity the active peer changes, like only one Peer can stay online?

    • @staticroute
      @staticroute  5 місяців тому

      Hey there, you're probably looking for something like ADVPN, I'm uploading a video on that very topic right now, should publish in a few hours. ADVPN improves on Dialup VPNs by enabling spokes to make on-demand connections to each other therefore literally achieving "full-mesh". In the video, I setup BGP with Hub as route reflector, in the case of OSPF, the config is a tiny bit different...please check it out, I'd be interested to know if it's what you're looking for.

    • @swissactiontv5128
      @swissactiontv5128 5 місяців тому +2

      @@staticroute Finally i could fix it, no ADVPN needed.
      Well on the HUB, Phase2 Selectors is Local and Remote 0.0.0.0 0.0.0.0 and i had to delete static routes toward the branches, cause Only if the Interface Name in the routes is with "_0" or "_1" etc. it knows to which tunnel the traffic needs to go, if there is a static route on the Hub toward the branches the interface in the route not has "_0" in it, so it can`t know which peer it should take
      On the Branches, the Phase2 Selector is local the local Subnets and Remote is also just 0.0.0.0 0.0.0.0, cause Fortinet can handle that.

  • @Dream24024
    @Dream24024 4 місяці тому +1

    Do i need port forwarding for thus configration or they can work without ?
    Becoz we are behined nat in each site

    • @staticroute
      @staticroute  4 місяці тому

      You should try with just NAT traversal and use outside addresses, I think port forwarding might break your VPN

  • @MrSatadal
    @MrSatadal 6 місяців тому +1

    In FGT 01 Where to define dialup client Tunnel IP range?

    • @staticroute
      @staticroute  6 місяців тому +1

      In our example, we don’t require the use of routing protocols, so the tunnel interface doesn’t need an ip address.

    • @MrSatadal
      @MrSatadal 6 місяців тому

      @@staticroute can you please make a video of dial UP ipsec with BGP?
      If already have the video please share link.

    • @staticroute
      @staticroute  6 місяців тому

      I’m publishing that video today, thank you for the suggestion..

    • @staticroute
      @staticroute  6 місяців тому +1

      Fortigate BGP over a Dialup VPN Site-to-Site Configuration
      ua-cam.com/video/-porUcCZhxE/v-deo.html

    • @staticroute
      @staticroute  6 місяців тому

      I hope this is what you were looking for, let
      me know..

  • @AnandNarine
    @AnandNarine 6 місяців тому

    what version fortios here ?

    • @staticroute
      @staticroute  6 місяців тому

      Hi Anand
      It's Version 7.0.15