I have been trying to cutover one of our remote sites (A) to the new ISP we have purchased. The existing setup is utilizing L2 through another remote site (B) and coming back to the main campus. The new ISP has provided us with a /29 public subnet.
I have been able to create an IPSec tunnel from the router at site_A to main campus fortigate. The main campus switch is handling L2 traffic
My problem resides with having all the traffic traverse this tunnel. I cannot get the existing phones, APs to register through the tunnel.
interface Tunnel4
ip address 172.31.1.1 255.255.0.0
tunnel source GigabitEthernet0/3/0
tunnel mode ipsec ipv4
tunnel destination {public address}
tunnel protection ipsec profile TO_FGT
the router is currently acting as the voice gateway as well
interface GigabitEthernet0/0
ip address 172.17.1.1 255.255.255.0
ip helper-address 172.16.5.5
ip helper-address 172.16.5.6
ip pim sparse-dense-mode
duplex auto
speed auto
h323-gateway voip interface
!
interface GigabitEthernet0/0.90
encapsulation dot1Q 90
ip address 10.10.90.1 255.255.255.0
ip pim sparse-dense-mode
!
interface GigabitEthernet0/1
no ip address
duplex auto
speed auto
!
interface GigabitEthernet0/1.55
encapsulation dot1Q 55
ip address 172.29.1.4 255.255.255.0
ip pim sparse-dense-mode
gi0/1 is the interface that will eventually be turned off as this is going to the old provider.
How can i make it so the tunnel handles all the traffic (including AP and Phone registrations)
Thank you for any help!