It's possible if creating vpn Mikrotik site A to Mikrotik site B through Fortigate?

RouterOS General
1

Hello everyone, i have stuck in my configuration.. When i tried config vpn ipsec Fortigate to Mikrotik still no luck because Mikrotik site is using Private Ip.

here’s my topology,

i was planning to config Mikrotik Site A to Mikrotik Site B through Fortigate is it possible?

thanks, your help is really appreciate

2

VPN behind other firewall is possible but you need to check if Fortigate does not block VPN traffic.

3

i did config using pptp, and allow policy through fortigate but still no sign connected…

4

Can you connect with IPSec to Site B with computer? Try this. If yes then you know that Fortigate is not a problem.

5

well that’s possible? the site B Mikrotik Gateway wan is using private ip

6

So there is one router in front of Site B missing … didn’t spot the private address. Does this missing router allows incoming VPN and passing it to Site B mikrotik?

7

Thanks for reply, well front Mikrotik Site B is ISP/Modem where’s i dont have access into it. Mikrotik site B using 192.168.1.1 to 0.0.0.0 dhcp from isp

8

There’s another solution except using ipsec?

9

SSTP should get through it. Maybe not with self-signed certificate though.
https://help.mikrotik.com/docs/display/ROS/SSTP