VPN Settings with External Load Balancer (GCP) about fortigate-terraform-deploy HOT 2 CLOSED

I also tried to use the 443 port for the VPN since the external load balancer protocol is configured only TCP (and not all as UNSPECIFIED), but still not working.

from fortigate-terraform-deploy.

Hi @CledersonE

As GCP's External LB traffic won't NAT the traffic to the private ip of the interface (https://172.16.8.3:10443).

In this case, you would probably need to have sslvpn listening on loopback interface and then create vip forward the traffic to the loopback interface.

Can take a look at the following URL.
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Unable-to-connect-SSL-VPN-on-Loopback/ta-p/192634
https://community.fortinet.com/t5/FortiGate/Techical-Tip-Access-SSL-VPN-from-Secondary-IP-only/ta-p/248259
https://yurisk.info/2023/03/21/fortigate-vpn-ssl-hardening-guide/#_move_vpn_ssl_listening_interface_to_a_loopback_interface

Otherwise, can just use other ha that doesn't use load balancer setup, and just have public ip associated to the wan interface directly.

Cheers

from fortigate-terraform-deploy.