Set tunnel-ip-pools 'SSLVPN_ClientAddresses' If you want to configure it in the CLI, the SSL-VPN settings config is config vpn ssl settings. Set to associate the SSL-VPN Portal created in advance with All Other Users/Groups.Īfter setting all items, click Apply at the bottom of the screen.

IP Ranges: Specify the same address object as the one specified in the Tunnel Mode> Source IP Pools field of the SSL-VPN portal.

Address Range: Specify Specify custom IP ranges.

Specify the port number to listen for SSL-VPN connections.

Specify the interface that accepts communication from SSL-VPN clients.

Set customize-forticlient-download-url disableĬlick VPN > SSL-VPN Settings to configure SSL-VPN settings. Set split-tunneling-routing-negate disable Set allow-user-access web ftp smb sftp telnet ssh vnc rdp ping If you want to configure it in the CLI, the SSL-VPN Portals config is config vpn ssl web portal.įortiGate-60E (SampleSSL-VPNPor~nel) # showįortiGate-60E (SampleSSL-VPNPor~nel) # show full-configuration

Specify the address object created in advance in the Tunnel Mode> Source IP Pools field.

Enter any portal name in the Name field.

The SSL-VPN portal includes SSL-VPN mode (Tunnel / Web) settings and various option settings.Ĭlick VPN > SSL-VPN Portals > Create New to create a new SSL-VPN Portal.Īs an example, create an SSL-VPN Portal in Tunnel mode. Here, as an example, create an address object as shown in the image below. FortiClient can be downloaded from the Fortinet download page.Ĭreating an Address Object for SSL-VPN ClientĬreate an address object as an address pool for issuing IP addresses to SSL-VPN clients. You need to install the VPN client software called FortiClient on the external client. Creating an Address Object for SSL-VPN ClientĮstablish SSL VPN from external client to FortiGateĮstablish an SSL VPN from a client outside the base network to FortiGate inside the base network so that external clients can access the inside of the base network.Establish SSL VPN from external client to FortiGate.

Fortinet vpn setup