Hot!Route everything through DialUp VPN with DHCP WAN address

Author
Fortigater
New Member
  • Total Posts : 1
  • Scores: 0
  • Reward points: 0
  • Joined: 2017/10/27 01:32:29
  • Status: offline
2017/10/27 01:43:54 (permalink)
0

Route everything through DialUp VPN with DHCP WAN address

Problem
I need to design with a Fortigate at HQ terminating DialUp IPsec VPNs from Fortigates at branch offices.
All user traffic from the branch offices should be routed through the VPN tunnel to HQ, and then to internet.
With a static IP on the WAN interface of the branch gates, this is easily accomplished by adding a static host-route (/32) to the HQ Peer IP thorugh the WAN gateway, and then add  a default route (0.0.0.0/0.0.0.0) point to the DialUp VPN interface.
 
However, if the branch offices have DHCP assigned WAN interfaces - How can I accomplish this? As we don't know the gateway IP in advance we can't add the static host-route to the HQ gate and I don't want to rely on updating this static route manually if the DHCP gateway changes.
Hope you guys could give me a solution, many thanks!
#1
Toshi Esumi
Expert Member
  • Total Posts : 1623
  • Scores: 137
  • Reward points: 0
  • Joined: 2014/11/06 09:56:42
  • Status: offline
Re: Route everything through DialUp VPN with DHCP WAN address 2017/10/27 08:38:01 (permalink)
0
http://cookbook.fortinet.com/hub-and-spoke-vpn-using-quick-mode-selectors/
See above cookbook. It's a little more complicated than you need (there are two HUBs) but it includes all you need.
#2
skrbek
New Member
  • Total Posts : 9
  • Scores: 2
  • Reward points: 0
  • Joined: 2015/03/18 07:41:21
  • Status: offline
Re: Route everything through DialUp VPN with DHCP WAN address 2018/10/22 10:13:12 (permalink)
0
I am looking for solution of this issue too. But there is not in the URL link.
There is static ip address of WAN interface only, not DHCP.
Would anyone know how solve this problem?
 
#3
Jump to:
© 2019 APG vNext Commercial Version 5.5