{"id":99,"date":"2025-02-10T17:35:49","date_gmt":"2025-02-10T16:35:49","guid":{"rendered":"https:\/\/pprzybyla.com\/blog\/?p=99"},"modified":"2025-02-10T17:35:49","modified_gmt":"2025-02-10T16:35:49","slug":"forticlient-ipsec-ikev2-dialup-over-tcp","status":"publish","type":"post","link":"https:\/\/pprzybyla.com\/blog\/forticlient-ipsec-ikev2-dialup-over-tcp\/","title":{"rendered":"FortiClient IPSec Ikev2 Dialup over TCP"},"content":{"rendered":"\n<p>As you might know SSL VPN on FortiGate soon will be depracated (SSLVPN server functionality is disabled by default on 2G RAM models and IMO it will be diabled for good in a few years). Due to recurring security bugs in SSL libraries, this is considered too much of a problem. To allow easier use, such as in home networks \/ hotel or cafe restaurant that do not allow UDP, a tcp transport for ipsec has been added. <\/p>\n\n\n\n<p>This forces admins to start moving to other solutions &#8211; ZTNA, FortiSASE or IPSEC VPNs. This post is about IPSEC VPNs and what can you do.<\/p>\n\n\n\n<p>My configuraion works and was tested on FortiOS 7.4.7 and FortiClient 7.4.2.  There are few option what can you do:<\/p>\n\n\n\n<p>For example, if you currently only use LDAP \/ S for your AD server, you can configure it in IPSEC using Ikev1 (Xauth only), but it is very limited for the same reason. In this model, for example, you will not use SAML EntraID.<\/p>\n\n\n\n<p>Let&#8217;s then focus on Ikev2. Documentation can be found here: <a href=\"https:\/\/docs.fortinet.com\/document\/fortigate\/7.4.7\/administration-guide\/785501\/forticlient-as-dialup-client\">https:\/\/docs.fortinet.com\/document\/fortigate\/7.4.7\/administration-guide\/785501\/forticlient-as-dialup-client<\/a><\/p>\n\n\n\n<p>First, let&#8217;s create a radius user group and then a user group that will refer to the corresponding AD group:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code class=\"\">config user radius\n    edit \"RAD-SRV1\"\n        set server \"169.254.0.10\"\n        set secret ENC set auth-type ms_chap_v2\n        set source-ip \"169.254.1.1\"\n        set require-message-authenticator disable #optional\n    next\nend\nconfig user group\n    edit \"UG_AD_VPN-1\"\n        set member \"RAD-SRV1\"\n        config match\n            edit 1\n                set server-name \"RAD-SRV1\"\n                set group-name \"AD_USER_GROUP\"\n            next\n        end\n    next\nend<\/code><\/pre>\n\n\n\n<p>I put require-message-authenticator because of the vulnerability: <a href=\"https:\/\/docs.fortinet.com\/document\/fortigate\/7.4.5\/fortios-release-notes\/5880\/radius-vulnerability\">https:\/\/docs.fortinet.com\/document\/fortigate\/7.4.5\/fortios-release-notes\/5880\/radius-vulnerability<\/a>  Unfortunately, the client for which I am configuring the VPN requires this feature to be disabled.<\/p>\n\n\n\n<p>Below is rest of configuration:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code class=\"\">config vpn ipsec phase1-interface\n    edit \"VPN-RA\"\n        set type dynamic\n        set interface \"wan1\"\n        set ike-version 2\n        set local-gw 198.51.100.1\n        set peertype any\n        set net-device disable\n        set mode-cfg enable\n        set ipv4-dns-server1 169.254.3.10\n        set ipv4-dns-server2 169.254.3.11\n        set proposal aes256-sha256 aes256-sha1\n        set dpd on-idle\n        set dhgrp 21\n        set eap enable\n        set eap-identity send-request\n        set transport udp-fallback-tcp #FortiGate dynamically selects the transport mode \n        set fallback-tcp-threshold 10\n        set assign-ip-from name\n        set ipv4-split-include \"VPN-RA-USERS_split\" #split-tunnel vpn\n        set ipv4-name \"VPN-RA-USERS_range\" #IPs for end users\n        set client-auto-negotiate enable\n        set client-keep-alive enable\n        set psksecret ENC \n        set dpd-retryinterval 60\n    next\nend\nconfig vpn ipsec phase2-interface\n    edit \"VPN-RA\"\n        set phase1name \"VPN-RA\"\n        set proposal aes256-sha256 aes256-sha1\n        set dhgrp 21\n        set keepalive enable\n    next\nend<\/code><\/pre>\n\n\n\n<p>More information about encapsulating ESP over TCP here: <a href=\"https:\/\/docs.fortinet.com\/document\/fortigate\/7.4.0\/new-features\/351073\/encapsulate-esp-packets-within-tcp-headers-7-4-2\">https:\/\/docs.fortinet.com\/document\/fortigate\/7.4.0\/new-features\/351073\/encapsulate-esp-packets-within-tcp-headers-7-4-2<\/a> <\/p>\n\n\n\n<p>I just set set transport udp-fallback-tcp with a change to the system setting set ike-tcp-port XXX. This will change the communication to TCP\/4500 if UDP\/ESP packets are blocked by ISP. I had some problems with S2S VPN after changing this port from 4500, so I left it as is.<\/p>\n\n\n\n<p>Now configure some firewall rules that use the VPN-RA interface as the source interface, remember to put the source user groups \/ IP addresses in the source field.<\/p>\n\n\n\n<p>Okay, all ready. You can configure Forticlient to connect<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"783\" height=\"508\" src=\"https:\/\/pprzybyla.com\/blog\/wp-content\/uploads\/2025\/02\/image-9.png\" alt=\"\" class=\"wp-image-100\" srcset=\"https:\/\/pprzybyla.com\/blog\/wp-content\/uploads\/2025\/02\/image-9.png 783w, https:\/\/pprzybyla.com\/blog\/wp-content\/uploads\/2025\/02\/image-9-300x195.png 300w, https:\/\/pprzybyla.com\/blog\/wp-content\/uploads\/2025\/02\/image-9-768x498.png 768w, https:\/\/pprzybyla.com\/blog\/wp-content\/uploads\/2025\/02\/image-9-660x428.png 660w\" sizes=\"auto, (max-width: 783px) 100vw, 783px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"570\" height=\"458\" src=\"https:\/\/pprzybyla.com\/blog\/wp-content\/uploads\/2025\/02\/image-10.png\" alt=\"\" class=\"wp-image-101\" srcset=\"https:\/\/pprzybyla.com\/blog\/wp-content\/uploads\/2025\/02\/image-10.png 570w, https:\/\/pprzybyla.com\/blog\/wp-content\/uploads\/2025\/02\/image-10-300x241.png 300w\" sizes=\"auto, (max-width: 570px) 100vw, 570px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"436\" height=\"100\" src=\"https:\/\/pprzybyla.com\/blog\/wp-content\/uploads\/2025\/02\/image-11.png\" alt=\"\" class=\"wp-image-102\" srcset=\"https:\/\/pprzybyla.com\/blog\/wp-content\/uploads\/2025\/02\/image-11.png 436w, https:\/\/pprzybyla.com\/blog\/wp-content\/uploads\/2025\/02\/image-11-300x69.png 300w\" sizes=\"auto, (max-width: 436px) 100vw, 436px\" \/><\/figure>\n\n\n\n<p>I also had a problem where FortiClient was connecting successfully, but was adding the route 0.0.0.0\/0 with the same metric as my own gateway in my routing table, nothing works then \ud83d\ude09 I removed FortiClient, rebooted, reinstalled and that fixed it.<\/p>\n\n\n\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>As you might know SSL VPN on FortiGate soon will be depracated (SSLVPN server functionality is disabled by default on 2G RAM models and IMO it will be diabled for good in a few years). Due to recurring security bugs in SSL libraries, this is considered too much of a problem. To allow easier use,\u2026 <span class=\"read-more\"><a href=\"https:\/\/pprzybyla.com\/blog\/forticlient-ipsec-ikev2-dialup-over-tcp\/\">Read More &raquo;<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":104,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[],"class_list":["post-99","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-fortigate"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v24.4 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>FortiClient IPSec Ikev2 Dialup over TCP - Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/pprzybyla.com\/blog\/forticlient-ipsec-ikev2-dialup-over-tcp\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"FortiClient IPSec Ikev2 Dialup over TCP - Blog\" \/>\n<meta property=\"og:description\" content=\"As you might know SSL VPN on FortiGate soon will be depracated (SSLVPN server functionality is disabled by default on 2G RAM models and IMO it will be diabled for good in a few years). Due to recurring security bugs in SSL libraries, this is considered too much of a problem. To allow easier use,\u2026 Read More &raquo;\" \/>\n<meta property=\"og:url\" content=\"https:\/\/pprzybyla.com\/blog\/forticlient-ipsec-ikev2-dialup-over-tcp\/\" \/>\n<meta property=\"og:site_name\" content=\"Blog\" \/>\n<meta property=\"article:published_time\" content=\"2025-02-10T16:35:49+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/pprzybyla.com\/blog\/wp-content\/uploads\/2025\/02\/Zrzut-ekranu-2025-02-10-173510.png\" \/>\n\t<meta property=\"og:image:width\" content=\"603\" \/>\n\t<meta property=\"og:image:height\" content=\"580\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/pprzybyla.com\/blog\/forticlient-ipsec-ikev2-dialup-over-tcp\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/pprzybyla.com\/blog\/forticlient-ipsec-ikev2-dialup-over-tcp\/\"},\"author\":{\"name\":\"admin\",\"@id\":\"http:\/\/pprzybyla.com\/blog\/#\/schema\/person\/78e3f329b514e87d4b8591f2e797b558\"},\"headline\":\"FortiClient IPSec Ikev2 Dialup over TCP\",\"datePublished\":\"2025-02-10T16:35:49+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/pprzybyla.com\/blog\/forticlient-ipsec-ikev2-dialup-over-tcp\/\"},\"wordCount\":387,\"commentCount\":0,\"publisher\":{\"@id\":\"http:\/\/pprzybyla.com\/blog\/#\/schema\/person\/78e3f329b514e87d4b8591f2e797b558\"},\"image\":{\"@id\":\"https:\/\/pprzybyla.com\/blog\/forticlient-ipsec-ikev2-dialup-over-tcp\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/pprzybyla.com\/blog\/wp-content\/uploads\/2025\/02\/Zrzut-ekranu-2025-02-10-173510.png\",\"articleSection\":[\"Fortigate\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/pprzybyla.com\/blog\/forticlient-ipsec-ikev2-dialup-over-tcp\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/pprzybyla.com\/blog\/forticlient-ipsec-ikev2-dialup-over-tcp\/\",\"url\":\"https:\/\/pprzybyla.com\/blog\/forticlient-ipsec-ikev2-dialup-over-tcp\/\",\"name\":\"FortiClient IPSec Ikev2 Dialup over TCP - Blog\",\"isPartOf\":{\"@id\":\"http:\/\/pprzybyla.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/pprzybyla.com\/blog\/forticlient-ipsec-ikev2-dialup-over-tcp\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/pprzybyla.com\/blog\/forticlient-ipsec-ikev2-dialup-over-tcp\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/pprzybyla.com\/blog\/wp-content\/uploads\/2025\/02\/Zrzut-ekranu-2025-02-10-173510.png\",\"datePublished\":\"2025-02-10T16:35:49+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/pprzybyla.com\/blog\/forticlient-ipsec-ikev2-dialup-over-tcp\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/pprzybyla.com\/blog\/forticlient-ipsec-ikev2-dialup-over-tcp\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/pprzybyla.com\/blog\/forticlient-ipsec-ikev2-dialup-over-tcp\/#primaryimage\",\"url\":\"https:\/\/pprzybyla.com\/blog\/wp-content\/uploads\/2025\/02\/Zrzut-ekranu-2025-02-10-173510.png\",\"contentUrl\":\"https:\/\/pprzybyla.com\/blog\/wp-content\/uploads\/2025\/02\/Zrzut-ekranu-2025-02-10-173510.png\",\"width\":603,\"height\":580},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/pprzybyla.com\/blog\/forticlient-ipsec-ikev2-dialup-over-tcp\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"http:\/\/pprzybyla.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"FortiClient IPSec Ikev2 Dialup over TCP\"}]},{\"@type\":\"WebSite\",\"@id\":\"http:\/\/pprzybyla.com\/blog\/#website\",\"url\":\"http:\/\/pprzybyla.com\/blog\/\",\"name\":\"Blog\",\"description\":\"\",\"publisher\":{\"@id\":\"http:\/\/pprzybyla.com\/blog\/#\/schema\/person\/78e3f329b514e87d4b8591f2e797b558\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"http:\/\/pprzybyla.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"http:\/\/pprzybyla.com\/blog\/#\/schema\/person\/78e3f329b514e87d4b8591f2e797b558\",\"name\":\"admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"http:\/\/pprzybyla.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"http:\/\/pprzybyla.com\/blog\/wp-content\/uploads\/2025\/02\/my-photo-url.jpg\",\"contentUrl\":\"http:\/\/pprzybyla.com\/blog\/wp-content\/uploads\/2025\/02\/my-photo-url.jpg\",\"width\":800,\"height\":800,\"caption\":\"admin\"},\"logo\":{\"@id\":\"http:\/\/pprzybyla.com\/blog\/#\/schema\/person\/image\/\"},\"sameAs\":[\"http:\/\/pprzybyla.com\/blog\"],\"url\":\"https:\/\/pprzybyla.com\/blog\/author\/admin\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"FortiClient IPSec Ikev2 Dialup over TCP - Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/pprzybyla.com\/blog\/forticlient-ipsec-ikev2-dialup-over-tcp\/","og_locale":"en_US","og_type":"article","og_title":"FortiClient IPSec Ikev2 Dialup over TCP - Blog","og_description":"As you might know SSL VPN on FortiGate soon will be depracated (SSLVPN server functionality is disabled by default on 2G RAM models and IMO it will be diabled for good in a few years). Due to recurring security bugs in SSL libraries, this is considered too much of a problem. To allow easier use,\u2026 Read More &raquo;","og_url":"https:\/\/pprzybyla.com\/blog\/forticlient-ipsec-ikev2-dialup-over-tcp\/","og_site_name":"Blog","article_published_time":"2025-02-10T16:35:49+00:00","og_image":[{"width":603,"height":580,"url":"https:\/\/pprzybyla.com\/blog\/wp-content\/uploads\/2025\/02\/Zrzut-ekranu-2025-02-10-173510.png","type":"image\/png"}],"author":"admin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"admin","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/pprzybyla.com\/blog\/forticlient-ipsec-ikev2-dialup-over-tcp\/#article","isPartOf":{"@id":"https:\/\/pprzybyla.com\/blog\/forticlient-ipsec-ikev2-dialup-over-tcp\/"},"author":{"name":"admin","@id":"http:\/\/pprzybyla.com\/blog\/#\/schema\/person\/78e3f329b514e87d4b8591f2e797b558"},"headline":"FortiClient IPSec Ikev2 Dialup over TCP","datePublished":"2025-02-10T16:35:49+00:00","mainEntityOfPage":{"@id":"https:\/\/pprzybyla.com\/blog\/forticlient-ipsec-ikev2-dialup-over-tcp\/"},"wordCount":387,"commentCount":0,"publisher":{"@id":"http:\/\/pprzybyla.com\/blog\/#\/schema\/person\/78e3f329b514e87d4b8591f2e797b558"},"image":{"@id":"https:\/\/pprzybyla.com\/blog\/forticlient-ipsec-ikev2-dialup-over-tcp\/#primaryimage"},"thumbnailUrl":"https:\/\/pprzybyla.com\/blog\/wp-content\/uploads\/2025\/02\/Zrzut-ekranu-2025-02-10-173510.png","articleSection":["Fortigate"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/pprzybyla.com\/blog\/forticlient-ipsec-ikev2-dialup-over-tcp\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/pprzybyla.com\/blog\/forticlient-ipsec-ikev2-dialup-over-tcp\/","url":"https:\/\/pprzybyla.com\/blog\/forticlient-ipsec-ikev2-dialup-over-tcp\/","name":"FortiClient IPSec Ikev2 Dialup over TCP - Blog","isPartOf":{"@id":"http:\/\/pprzybyla.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/pprzybyla.com\/blog\/forticlient-ipsec-ikev2-dialup-over-tcp\/#primaryimage"},"image":{"@id":"https:\/\/pprzybyla.com\/blog\/forticlient-ipsec-ikev2-dialup-over-tcp\/#primaryimage"},"thumbnailUrl":"https:\/\/pprzybyla.com\/blog\/wp-content\/uploads\/2025\/02\/Zrzut-ekranu-2025-02-10-173510.png","datePublished":"2025-02-10T16:35:49+00:00","breadcrumb":{"@id":"https:\/\/pprzybyla.com\/blog\/forticlient-ipsec-ikev2-dialup-over-tcp\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/pprzybyla.com\/blog\/forticlient-ipsec-ikev2-dialup-over-tcp\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/pprzybyla.com\/blog\/forticlient-ipsec-ikev2-dialup-over-tcp\/#primaryimage","url":"https:\/\/pprzybyla.com\/blog\/wp-content\/uploads\/2025\/02\/Zrzut-ekranu-2025-02-10-173510.png","contentUrl":"https:\/\/pprzybyla.com\/blog\/wp-content\/uploads\/2025\/02\/Zrzut-ekranu-2025-02-10-173510.png","width":603,"height":580},{"@type":"BreadcrumbList","@id":"https:\/\/pprzybyla.com\/blog\/forticlient-ipsec-ikev2-dialup-over-tcp\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"http:\/\/pprzybyla.com\/blog\/"},{"@type":"ListItem","position":2,"name":"FortiClient IPSec Ikev2 Dialup over TCP"}]},{"@type":"WebSite","@id":"http:\/\/pprzybyla.com\/blog\/#website","url":"http:\/\/pprzybyla.com\/blog\/","name":"Blog","description":"","publisher":{"@id":"http:\/\/pprzybyla.com\/blog\/#\/schema\/person\/78e3f329b514e87d4b8591f2e797b558"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"http:\/\/pprzybyla.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":["Person","Organization"],"@id":"http:\/\/pprzybyla.com\/blog\/#\/schema\/person\/78e3f329b514e87d4b8591f2e797b558","name":"admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"http:\/\/pprzybyla.com\/blog\/#\/schema\/person\/image\/","url":"http:\/\/pprzybyla.com\/blog\/wp-content\/uploads\/2025\/02\/my-photo-url.jpg","contentUrl":"http:\/\/pprzybyla.com\/blog\/wp-content\/uploads\/2025\/02\/my-photo-url.jpg","width":800,"height":800,"caption":"admin"},"logo":{"@id":"http:\/\/pprzybyla.com\/blog\/#\/schema\/person\/image\/"},"sameAs":["http:\/\/pprzybyla.com\/blog"],"url":"https:\/\/pprzybyla.com\/blog\/author\/admin\/"}]}},"_links":{"self":[{"href":"https:\/\/pprzybyla.com\/blog\/wp-json\/wp\/v2\/posts\/99","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pprzybyla.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pprzybyla.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pprzybyla.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pprzybyla.com\/blog\/wp-json\/wp\/v2\/comments?post=99"}],"version-history":[{"count":2,"href":"https:\/\/pprzybyla.com\/blog\/wp-json\/wp\/v2\/posts\/99\/revisions"}],"predecessor-version":[{"id":105,"href":"https:\/\/pprzybyla.com\/blog\/wp-json\/wp\/v2\/posts\/99\/revisions\/105"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/pprzybyla.com\/blog\/wp-json\/wp\/v2\/media\/104"}],"wp:attachment":[{"href":"https:\/\/pprzybyla.com\/blog\/wp-json\/wp\/v2\/media?parent=99"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pprzybyla.com\/blog\/wp-json\/wp\/v2\/categories?post=99"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pprzybyla.com\/blog\/wp-json\/wp\/v2\/tags?post=99"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}