On Thu, Feb 10, 2022 at 10:06 AM Guillaume Tournat <guillaume@ironie.org> wrote:

Fortinet firewalls (FortiGate) are a great deal

Thanks Guillaume, I found this https://community.fortinet.com/t5/FortiGate/Technical-Tip-IPsec-VPN-between-... but it suggests that the dynamic IP fortigate expects to have a public dynamic IP directly on the Fortigate, not be stuck behind a NAT. Are you aware of any documentation that describes: LAN - Fortigate - NAT (dynaimic IP) - Internet - (static IP) Fortigate - LAN Where the Meraki is responsible for keeping the NAT translations alive without any programming on the NAT? Regards, Bill -- William Herrin bill@herrin.us https://bill.herrin.us/