Community discussions

MikroTik App
 
alan02
just joined
Topic Author
Posts: 5
Joined: Thu May 18, 2023 1:36 pm

It's possible if creating vpn Mikrotik site A to Mikrotik site B through Fortigate?

Thu May 18, 2023 1:50 pm

Hello everyone, i have stuck in my configuration.. When i tried config vpn ipsec Fortigate to Mikrotik still no luck because Mikrotik site is using Private Ip.

here's my topology,

Image

i was planning to config Mikrotik Site A to Mikrotik Site B through Fortigate is it possible?

thanks, your help is really appreciate
 
User avatar
BartoszP
Forum Guru
Forum Guru
Posts: 2855
Joined: Mon Jun 16, 2014 1:13 pm
Location: Poland

Re: It's possible if creating vpn Mikrotik site A to Mikrotik site B through Fortigate?

Thu May 18, 2023 2:01 pm

VPN behind other firewall is possible but you need to check if Fortigate does not block VPN traffic.
 
alan02
just joined
Topic Author
Posts: 5
Joined: Thu May 18, 2023 1:36 pm

Re: It's possible if creating vpn Mikrotik site A to Mikrotik site B through Fortigate?

Thu May 18, 2023 2:40 pm

i did config using pptp, and allow policy through fortigate but still no sign connected...
 
User avatar
BartoszP
Forum Guru
Forum Guru
Posts: 2855
Joined: Mon Jun 16, 2014 1:13 pm
Location: Poland

Re: It's possible if creating vpn Mikrotik site A to Mikrotik site B through Fortigate?

Thu May 18, 2023 4:17 pm

Can you connect with IPSec to Site B with computer? Try this. If yes then you know that Fortigate is not a problem.
 
alan02
just joined
Topic Author
Posts: 5
Joined: Thu May 18, 2023 1:36 pm

Re: It's possible if creating vpn Mikrotik site A to Mikrotik site B through Fortigate?

Fri May 19, 2023 5:25 am

well that's possible? the site B Mikrotik Gateway wan is using private ip
 
User avatar
BartoszP
Forum Guru
Forum Guru
Posts: 2855
Joined: Mon Jun 16, 2014 1:13 pm
Location: Poland

Re: It's possible if creating vpn Mikrotik site A to Mikrotik site B through Fortigate?

Fri May 19, 2023 11:34 am

So there is one router in front of Site B missing ... didn't spot the private address. Does this missing router allows incoming VPN and passing it to Site B mikrotik?
 
alan02
just joined
Topic Author
Posts: 5
Joined: Thu May 18, 2023 1:36 pm

Re: It's possible if creating vpn Mikrotik site A to Mikrotik site B through Fortigate?

Fri May 19, 2023 12:34 pm

Thanks for reply, well front Mikrotik Site B is ISP/Modem where's i dont have access into it. Mikrotik site B using 192.168.1.1 to 0.0.0.0 dhcp from isp
Last edited by alan02 on Fri May 19, 2023 1:53 pm, edited 1 time in total.
 
alan02
just joined
Topic Author
Posts: 5
Joined: Thu May 18, 2023 1:36 pm

Re: It's possible if creating vpn Mikrotik site A to Mikrotik site B through Fortigate?

Fri May 19, 2023 12:36 pm

There's another solution except using ipsec?
 
AntiUltimate
just joined
Posts: 10
Joined: Tue Sep 11, 2018 9:25 pm

Re: It's possible if creating vpn Mikrotik site A to Mikrotik site B through Fortigate?

Fri May 19, 2023 2:16 pm

There's another solution except using ipsec?
SSTP should get through it. Maybe not with self-signed certificate though.
https://help.mikrotik.com/docs/display/ROS/SSTP

Who is online

Users browsing this forum: diasdm, Google [Bot], MrBrick, Sailwebwifi, SMARTNETTT and 64 guests