{"id":483,"date":"2010-08-16T09:51:14","date_gmt":"2010-08-16T07:51:14","guid":{"rendered":"http:\/\/www.netexpertise.eu\/fr\/?p=483"},"modified":"2021-08-28T20:35:58","modified_gmt":"2021-08-28T19:35:58","slug":"les-clients-vpn-dialup-nobtiennent-pas-dadresse-dhcp-du-fortigate","status":"publish","type":"post","link":"http:\/\/www.netexpertise.eu\/fr\/reseau\/fortinet\/les-clients-vpn-dialup-nobtiennent-pas-dadresse-dhcp-du-fortigate.html","title":{"rendered":"Les Clients VPN IPSEC n&rsquo;obtiennent pas d&rsquo;adresse DHCP du Fortigate"},"content":{"rendered":"\n<p>Nous utilisons le client VPN Forticlient de <a href=\"\/fr\/category\/reseau\/fortinet\">Fortinet<\/a> pour nous connecter \u00e0 notre firewall Fortigate via l&rsquo;encryption IPSEC. Nous aimerions donner aux clients une adresse IP par DHCP pour n&rsquo;avoir rien d&rsquo;autre \u00e0 g\u00e9rer que l&rsquo;authentification des utilisateurs.<br><br>Les clients VPN dialup n&rsquo;obtiennent pas d&rsquo;adresse IP du Fortigate alors que le pool DHCP est bien cr\u00e9\u00e9 et que l&rsquo;option \u00ab\u00a0DHCP-IPsec\u00a0\u00bb est bien coch\u00e9e dans les param\u00e8tres de la phase 2 du VPN. Une erreur IPSEC ESP est aussi remont\u00e9e dans les logs.<br>Affecter une adresse IP statique au client permet de se connecter.<br>\u00a0<br>Le firewall re\u00e7oit bien des requ\u00eates DHCP mais ne les renvoie pas dans le tunnel <a href=\"https:\/\/www.journaldunet.fr\/web-tech\/dictionnaire-du-webmastering\/1203461-ipsec-internet-protocol-security-definition-traduction\/\" target=\"_blank\" rel=\"noreferrer noopener\">IPSEC<\/a>. Pour r\u00e9soudre le probl\u00e8me, une r\u00e8gle additionnelle de pare-feu doit \u00eatre ajout\u00e9e pour encrypter le trafic DHCP &#8211; et DHCP seulement &#8211; depuis l&rsquo;interface interne vers l&rsquo;externe. Laissez les adresses source et destination \u00e0 \u00ab\u00a0any\u00a0\u00bb puisque ceci est un probl\u00e8me IP niveau 2. Le client n&rsquo;a pas encore re\u00e7u d&rsquo;adresse! S\u00e9lectionnez \u00ab\u00a0DHCP\u00a0\u00bb comme service, IPSEC pour action, et enfin le tunnel VPN appropri\u00e9.<br><br>La capture d&rsquo;\u00e9cran a \u00e9t\u00e9 faite sur un Fortiwifi mais la configuration est la m\u00eame pour tout Fortigate. Les clients IPSEC devraient maintenant obtenir une adresse IP dynamique via DHCP.<br><br><\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-large\"><img src=\"\/images\/Fortigate_DHCP_IPSEC.png\" alt=\"R\u00e8gle de firewall IPSEC DHCP sur Fortigate\"\/><\/figure><\/div>\n","protected":false},"excerpt":{"rendered":"<p>Nous utilisons le client VPN Forticlient de Fortinet pour nous connecter \u00e0 notre firewall Fortigate via l&rsquo;encryption IPSEC. Nous aimerions donner aux clients une adresse IP par DHCP pour n&rsquo;avoir rien d&rsquo;autre \u00e0 g\u00e9rer que l&rsquo;authentification des utilisateurs. Les clients VPN dialup n&rsquo;obtiennent pas d&rsquo;adresse IP du Fortigate alors que le pool DHCP est bien [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_mi_skip_tracking":false},"categories":[334],"tags":[385,378,417,463,233],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v19.13 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Netexpertise - Les Clients VPN IPSEC n&#039;obtiennent pas d&#039;adresse DHCP du Fortigate<\/title>\n<meta name=\"description\" content=\"Les clients VPN IPSEC Forticlient n&#039;obtiennent pas d&#039;adresse DHCP. Voici comment renvoyer le trafic DHCP dans le tunnel encrypt\u00e9\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"http:\/\/www.netexpertise.eu\/fr\/reseau\/fortinet\/les-clients-vpn-dialup-nobtiennent-pas-dadresse-dhcp-du-fortigate.html\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Netexpertise - Les Clients VPN IPSEC n&#039;obtiennent pas d&#039;adresse DHCP du Fortigate\" \/>\n<meta property=\"og:description\" content=\"Les clients VPN IPSEC Forticlient n&#039;obtiennent pas d&#039;adresse DHCP. Voici comment renvoyer le trafic DHCP dans le tunnel encrypt\u00e9\" \/>\n<meta property=\"og:url\" content=\"http:\/\/www.netexpertise.eu\/fr\/reseau\/fortinet\/les-clients-vpn-dialup-nobtiennent-pas-dadresse-dhcp-du-fortigate.html\" \/>\n<meta property=\"og:site_name\" content=\"Netexpertise\" \/>\n<meta property=\"article:published_time\" content=\"2010-08-16T07:51:14+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-08-28T19:35:58+00:00\" \/>\n<meta name=\"author\" content=\"dave\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@netexpertise\" \/>\n<meta name=\"twitter:site\" content=\"@netexpertise\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"http:\/\/www.netexpertise.eu\/fr\/reseau\/fortinet\/les-clients-vpn-dialup-nobtiennent-pas-dadresse-dhcp-du-fortigate.html\",\"url\":\"http:\/\/www.netexpertise.eu\/fr\/reseau\/fortinet\/les-clients-vpn-dialup-nobtiennent-pas-dadresse-dhcp-du-fortigate.html\",\"name\":\"Netexpertise - Les Clients VPN IPSEC n'obtiennent pas d'adresse DHCP du Fortigate\",\"isPartOf\":{\"@id\":\"https:\/\/www.netexpertise.eu\/fr\/#website\"},\"datePublished\":\"2010-08-16T07:51:14+00:00\",\"dateModified\":\"2021-08-28T19:35:58+00:00\",\"author\":{\"@id\":\"https:\/\/www.netexpertise.eu\/fr\/#\/schema\/person\/e398f0307e2b167f6b884c4953be2632\"},\"description\":\"Les clients VPN IPSEC Forticlient n'obtiennent pas d'adresse DHCP. Voici comment renvoyer le trafic DHCP dans le tunnel encrypt\u00e9\",\"breadcrumb\":{\"@id\":\"http:\/\/www.netexpertise.eu\/fr\/reseau\/fortinet\/les-clients-vpn-dialup-nobtiennent-pas-dadresse-dhcp-du-fortigate.html#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"http:\/\/www.netexpertise.eu\/fr\/reseau\/fortinet\/les-clients-vpn-dialup-nobtiennent-pas-dadresse-dhcp-du-fortigate.html\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"http:\/\/www.netexpertise.eu\/fr\/reseau\/fortinet\/les-clients-vpn-dialup-nobtiennent-pas-dadresse-dhcp-du-fortigate.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\/\/www.netexpertise.eu\/fr\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Les Clients VPN IPSEC n&rsquo;obtiennent pas d&rsquo;adresse DHCP du Fortigate\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.netexpertise.eu\/fr\/#website\",\"url\":\"https:\/\/www.netexpertise.eu\/fr\/\",\"name\":\"Netexpertise\",\"description\":\"Syst\u00e8mes \/ R\u00e9seaux \/ DevOps\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.netexpertise.eu\/fr\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.netexpertise.eu\/fr\/#\/schema\/person\/e398f0307e2b167f6b884c4953be2632\",\"name\":\"dave\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\/\/www.netexpertise.eu\/fr\/#\/schema\/person\/image\/\",\"url\":\"http:\/\/1.gravatar.com\/avatar\/1129916e1f4955bd632f27f836f64e55?s=96&d=mm&r=g\",\"contentUrl\":\"http:\/\/1.gravatar.com\/avatar\/1129916e1f4955bd632f27f836f64e55?s=96&d=mm&r=g\",\"caption\":\"dave\"},\"sameAs\":[\"http:\/\/www.netexpertise.eu\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Netexpertise - Les Clients VPN IPSEC n'obtiennent pas d'adresse DHCP du Fortigate","description":"Les clients VPN IPSEC Forticlient n'obtiennent pas d'adresse DHCP. Voici comment renvoyer le trafic DHCP dans le tunnel encrypt\u00e9","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"http:\/\/www.netexpertise.eu\/fr\/reseau\/fortinet\/les-clients-vpn-dialup-nobtiennent-pas-dadresse-dhcp-du-fortigate.html","og_locale":"fr_FR","og_type":"article","og_title":"Netexpertise - Les Clients VPN IPSEC n'obtiennent pas d'adresse DHCP du Fortigate","og_description":"Les clients VPN IPSEC Forticlient n'obtiennent pas d'adresse DHCP. Voici comment renvoyer le trafic DHCP dans le tunnel encrypt\u00e9","og_url":"http:\/\/www.netexpertise.eu\/fr\/reseau\/fortinet\/les-clients-vpn-dialup-nobtiennent-pas-dadresse-dhcp-du-fortigate.html","og_site_name":"Netexpertise","article_published_time":"2010-08-16T07:51:14+00:00","article_modified_time":"2021-08-28T19:35:58+00:00","author":"dave","twitter_card":"summary_large_image","twitter_creator":"@netexpertise","twitter_site":"@netexpertise","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"http:\/\/www.netexpertise.eu\/fr\/reseau\/fortinet\/les-clients-vpn-dialup-nobtiennent-pas-dadresse-dhcp-du-fortigate.html","url":"http:\/\/www.netexpertise.eu\/fr\/reseau\/fortinet\/les-clients-vpn-dialup-nobtiennent-pas-dadresse-dhcp-du-fortigate.html","name":"Netexpertise - Les Clients VPN IPSEC n'obtiennent pas d'adresse DHCP du Fortigate","isPartOf":{"@id":"https:\/\/www.netexpertise.eu\/fr\/#website"},"datePublished":"2010-08-16T07:51:14+00:00","dateModified":"2021-08-28T19:35:58+00:00","author":{"@id":"https:\/\/www.netexpertise.eu\/fr\/#\/schema\/person\/e398f0307e2b167f6b884c4953be2632"},"description":"Les clients VPN IPSEC Forticlient n'obtiennent pas d'adresse DHCP. Voici comment renvoyer le trafic DHCP dans le tunnel encrypt\u00e9","breadcrumb":{"@id":"http:\/\/www.netexpertise.eu\/fr\/reseau\/fortinet\/les-clients-vpn-dialup-nobtiennent-pas-dadresse-dhcp-du-fortigate.html#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["http:\/\/www.netexpertise.eu\/fr\/reseau\/fortinet\/les-clients-vpn-dialup-nobtiennent-pas-dadresse-dhcp-du-fortigate.html"]}]},{"@type":"BreadcrumbList","@id":"http:\/\/www.netexpertise.eu\/fr\/reseau\/fortinet\/les-clients-vpn-dialup-nobtiennent-pas-dadresse-dhcp-du-fortigate.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.netexpertise.eu\/fr"},{"@type":"ListItem","position":2,"name":"Les Clients VPN IPSEC n&rsquo;obtiennent pas d&rsquo;adresse DHCP du Fortigate"}]},{"@type":"WebSite","@id":"https:\/\/www.netexpertise.eu\/fr\/#website","url":"https:\/\/www.netexpertise.eu\/fr\/","name":"Netexpertise","description":"Syst\u00e8mes \/ R\u00e9seaux \/ DevOps","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.netexpertise.eu\/fr\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"fr-FR"},{"@type":"Person","@id":"https:\/\/www.netexpertise.eu\/fr\/#\/schema\/person\/e398f0307e2b167f6b884c4953be2632","name":"dave","image":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/www.netexpertise.eu\/fr\/#\/schema\/person\/image\/","url":"http:\/\/1.gravatar.com\/avatar\/1129916e1f4955bd632f27f836f64e55?s=96&d=mm&r=g","contentUrl":"http:\/\/1.gravatar.com\/avatar\/1129916e1f4955bd632f27f836f64e55?s=96&d=mm&r=g","caption":"dave"},"sameAs":["http:\/\/www.netexpertise.eu"]}]}},"_links":{"self":[{"href":"http:\/\/www.netexpertise.eu\/fr\/wp-json\/wp\/v2\/posts\/483"}],"collection":[{"href":"http:\/\/www.netexpertise.eu\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.netexpertise.eu\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.netexpertise.eu\/fr\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"http:\/\/www.netexpertise.eu\/fr\/wp-json\/wp\/v2\/comments?post=483"}],"version-history":[{"count":0,"href":"http:\/\/www.netexpertise.eu\/fr\/wp-json\/wp\/v2\/posts\/483\/revisions"}],"wp:attachment":[{"href":"http:\/\/www.netexpertise.eu\/fr\/wp-json\/wp\/v2\/media?parent=483"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.netexpertise.eu\/fr\/wp-json\/wp\/v2\/categories?post=483"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.netexpertise.eu\/fr\/wp-json\/wp\/v2\/tags?post=483"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}