Site to Site VPN - Up but can only access remote Fortigate

Author
bcp
New Member
  • Total Posts : 1
  • Scores: 0
  • Reward points: 0
  • Joined: 2020/05/19 08:09:41
  • Status: offline
2020/05/19 08:14:44 (permalink)
0

Site to Site VPN - Up but can only access remote Fortigate

I'm setting up two new Fortigate 60F devices, one at a head office and the other at the branch office. Using the VPN IPsec wizard I created IPsec tunnels on each and it shows status: up.
 
However, from a computer at the branch office I cannot access IPs on the head office network (for example, 192.168.20.20) but I can reach the head office Fortigate (192.168.20.1). 
 
Is there another step I need to do?
 
Thanks. 
#1

1 Reply Related Threads

    sw2090
    Platinum Member
    • Total Posts : 594
    • Scores: 39
    • Reward points: 0
    • Joined: 2017/06/14 01:27:25
    • Location: Regensburg
    • Status: offline
    Re: Site to Site VPN - Up but can only access remote Fortigate 2020/05/20 02:17:10 (permalink)
    0
    might mean that you are missing some policy on at least one side?
    You have to have  a policy to allow branch to head office on both sides!
    You already seem to have the required route(s) as you can reach the FGT at head office from branch side.
     
    Also some flow debug on both sides might show you what happens (or does not happen)...
    #2
    Jump to:
    © 2020 APG vNext Commercial Version 5.5