Since passthrough mode removes a lot of router functionality, I’d suggest setting the device to NAT mode. Once that is done, I’d suggest checking a few IPsec troubleshooting threads we’ve had previously:
If none of these help, please navigate to Services → VPN → IPsec, open the logs of the created instance and paste them in your next comment. Make sure to remove any public IPs or other identifiable information!
We want to use the features of the Fortinet router.
passthrough mode should be the right option, right?
If the forti can’t establish ipsec, 2 possibilities port 500 or port 4500 are blocked by the rut.
do i need to open ports?
Do you have any documentation on passthrough mode?
Apologies, I misunderstood your configuration.
If the RUT9 is configured in passthrough mode, it should allow all traffic to flow through, as it does not use the firewall in this mode.
I’d highly suggest upgrading to the latest firmware without the option to Keep settings enabled, configure the device in Bridge mode or Passthrough mode and re-check if everything is working. If it’s not, I’d recommend using inspecting the packets coming into the firewall, as it’s unlikely that the RUT9 is the issue here.