Remote Access IPsec VPN on FortiGate using FortiClient | I Create a VPN Tunnel to my Home Network

[@KBTrainings]

Don't forget to like the video if you liked it and also subscribe to our channel for more content like this. Also check out the rest of the FortiGate videos here on KBtrainings.

[@AspiringNetworkEngineer]

I'm setting up a new FortiGate 40F appliance to provide IPsec VPN access for our remote users. This video will definitely help and will save me time. Keep it up, my friend!

[@ananpaopramot5776]

This is the Great one of VPN. I am the newbie and I have questions. 1. Does Fortigate 80D is 1st router or 2nd router? 2. Shall I use Win10, Network connection to log in, instead of Forti client? 3. Shall I use vpn connection in Android mobile phone, instead of Forti client? Thanks and really appreciated your answer.

[@Translationcloud]

That's pretty sweet. I like your style of explaining it. VPN is my new thing I wanna setup.

[@KBTrainings]

Go for it and have fun!

[@yassinemarhoum9758]

biiiiiiiiig thanks from Morocco, hope more videos about fortinet and security in general great job

[@KBTrainings]

Yep, more videos coming. Thank you, Guy

[@ignatiuskamunda2868]

Great video Mr. Thanks for sharing. My apologies for bringing this now. I'm curently having a problem to access my server via remote access VPN

[@KBTrainings]

Thanks for watching. What happened?

[@faheemkhan2490]

This will help me in a new deployment. Subscribed.

[@KBTrainings]

Glad to hear that!

[@gaetanabby1352]

Salut KB, tu expliques super bien les choses

[@KBTrainings]

Salut Gaetan. Merci!

[@islam_zaid]

Thanks for your tutorial. I want to ask a question, do I have to get specific hardware to use Fortigate, I tried to download the application from the internet but I couldn't. Thanks

[@KBTrainings]

You're welcome. I don't get the question... Do you own a FortiGate? What application where you trying to download?

[@bjaspidey]

Another great video! keep them coming!

[@GuyBisuku]

Thank you Bart!

[@KBTrainings]

Thanks! Will do!

[@HolidayThrill24]

great real world example

[@KBTrainings]

Thank you!

[@eliglu]

Gracias broooooo!!! saludos desde argentina!

[@KBTrainings]

Gracias Senor!

[@guillermofeller3451]

you are the best!

[@KBTrainings]

Thank you 🙏

[@dennisaraza5940]

Hi, How you were able to connect in you IPSec VPN from your phone if you don't have internet? connecting to IPSec VPN requires internet right? or you have a firewall at home and filtered the traffic except going to your host fortinet firewall?

[@djIraScience]

thanks. those are really good real-world examples : )

[@KBTrainings]

My pleasure!

[@VANKLAB]

Nice videos. Keep up the good work.

[@KBTrainings]

Thanks Michael, will do!

[@afakhpatel8522]

How do you study IT certifications ? Like how do you go though the videos and books ? How many times should i go through the book and videos ?

[@KBTrainings]

Great question! I will write my process down and respond here. And will also make a video about it. Thank you Afakh!

[@afakhpatel8522]

Thanks really appreciate it !

[@williamtun1783]

Thanks and really helpful. I have facing some issue that the local internet connection is drop after connected to IPSec VPN. I can access to inside network and interner from VPN. What should i check for the local internet connection, Please?

[@Networking_with_Neaz_Arefin]

Thanks, do you have any/similar videos for remote access IPsec VPN to my home network on Cisco firewall using cisco any connect or from any where in the world ?

[@raspopitudeceneu]

why did you create the user and ther user group in CLI? Is not the same thing as creating it in GUI? Thanks!

[@KBTrainings]

For users, It is the same, it is just a personal preference. But in general the CLI has more power than the GUI, you can do way more there.

[@xclusivereef5805]

Hey good video... I was wondering can you do a follow up video on more configuration of the firewall and possible expand the home network to include a switch and access points ?

[@KBTrainings]

Sure. More videos are coming.

[@Jomster777]

Great video, really helpful tutorial. I have to ask though, will we need a static IP address for our VPN Fortigate in order to connect to it? Can we use dynamic IP from ISP and is there a way to map it to a URL/domain?

[@romandavydov8684]

it depends on your ISP. if your ISP provide dynamic IP but it still can go throu to your router than yes you can use Ddns service to used this IP. however if your ISP provides so called gray IP. than your ISP doesn't allow external access to your router so it will be impossible to use VPN.

[@KBTrainings]

@STEAR Gaming, Not sure how I missed this comment... If you have static IP, that is great. With dynamic IP, as @Roman mentioned, you can use DDNSnfrom FortiGuard or no-IP to link your IP to a fqdn so that your IP us dynamically updated each time it changes. Thank you!

[@ebosac8813]

Please can u make a video on external dhcp option 138 for fortigate wlc

[@gynslyluma3001]

Merci beaucoup c'est très instructif

[@KBTrainings]

Merci a toi!

[@hovgh1347]

do I need the service plan? can i just get the fortigate 40

[@saifemran4528]

Is it possible to use a device like your Fortigate without a license, I know I will be losing some features but is possible for home network use? Thanks

[@KBTrainings]

Yes, and I made a video about it. kzbin.info/www/bejne/oqS0maaoba-kf6c

[@LalitKumar-ui8my]

I just created vpn tunneling and its working same network only.when I try to connect through out of home network it was not connected to VPN tunnel. Can you suggest me what should I try to resolve the problem. Or connect my phone any where to my home vpn tunnel.

[@syedhussain904]

Soooooooo nice. Thanks buddy, you make my concepts very clear. In your video you use IPSEC for encryption, can you please guide me how can i use OPENVPN protocol for vpn encryption

[@KBTrainings]

Yes, soon! Thank you!

[@narendranikki2060]

This could only home network right ?

[@KBTrainings]

Not sure I get the question, but yes, this is my home network and the settings work for any network

IP4 Policy / Vpn to Lab -> Nat why didn't you close?

[@audreympp9305]

Thank you for sharing, good contents 👌👌

[@KBTrainings]

Thanks to you for watching

[@sibyllem4452]

Yeah, great materials we can use here

[@KBTrainings]

😀😀

[@KBTrainings]

Thank you!

[@lennymartinez8089]

Nice tutorial bro, got lost on the subnet item since you dont create it on this tutorial

[@KBTrainings]

Thanks Lenny! I hope you figured it out.

[@lennymartinez8089]

@@KBTrainings Idid, thanks a lot. got everything up and running by this tuto, kudos to you.

[@KBTrainings]

my pleasure!

[@JatinderSingh3192]

Thanks for the excellent video..I wanna share one suggestion.Please improve video quality

[@KBTrainings]

Thank you! What do you think can be improved in term of quality? Would you be more specific?

[@JatinderSingh3192]

@@KBTrainings There is a little bit of problem to view words of screen on high quality

[@KBTrainings]

Ah ok, I see. Thank you for the feedback. Will make it bigger in next videos.

[@JatinderSingh3192]

@@KBTrainings Thanks, because for a beginner that is more important like me..LOL

[@KBTrainings]

Definitely understandable! 🙂

[@mak_ulet]

I follow the instructions. but is says on VPN Status: VPN IPSec Phase 1 interface (red arrow down)

[@KBTrainings]

Make sure you are not missing anything and Google or the fortinet docs can also help. Good luck with that.

[@mohmaedhajithmohmaedhajith4782]

Please post some waf videos..

[@VijayKumar-tk9ym]

👏👏😊

[@KBTrainings]

Thank you Vijay!

[@tobichannelable]

What is the IP of Home Subnet?

[@georgemandilas896]

Hi locally i can connect but from my job it can not connect

[@Jomster777]

Maybe your job has a policy that prevents VPN tunnel connections. Check all possible policies that may pertain to this(Microsoft GPO, Your Office Firewall, Router configurations, etc.). My office has measures to block VPN connections going outside from within.

[@gratiasbanka4498]

Good

[@KBTrainings]

Thanks

[@ronaldjackson3416]

I have an 80E, configured WAN1 10.102.56.22/24 my LAN is 10.205.0.0/24 and port 1 is 10.205.0.142. I plugged a laptop into WAN#1 to establish the IPSec tunnel, have it assign the laptop 10.205.0.22. I connect another laptop to LAN port1 and statically config it for 10.205.0.141. I want to see if I can pass traffic both ways. I can ping from the WAN laptop all the way to the .142 address but not the other laptop at 10.205.0.141. The other way, from the laptop on port 1 of local LAN, I can ping the Fortinet port1 address of 10.205.0.142 but not to the 10.205.0.22 address. I tried static routes but to no avail. Any advice sir?

[@KBTrainings]

Hi Ronald, Without looking deeper into this, I'd ask to make sure there is a policy allowing the traffic from .22 to the LAN. When I have my servers set up, I will try to replicate this and post it on YT.

[@darkcnotion]

Guy is my guy 😅

[@kokokodale3501]

Mon frère on trouve de tonnes de vidéo de ce que tu viens de nous faire là en anglais. Mais en français il y en pas. Tu es à la base Francophone, tu aurais pu nous aider en premier car les francophones on galère pour trouver de tels tuto en français.

[@KBTrainings]

🤔 J'ai des vidéos en Francais aussi.

[@Sabs761010]

@KBTrainings i would like if you could do a setup client to site VPN in Cisco router cause you explain so clear an make it so smoth i tried this video of other guy kzbin.info/www/bejne/eZ7Sc3yvnrOGsNU but i so confused.