fortigate-ipsec-40-mr3

Configure the dynamically-addressed VPN peer Dynamic DNS configuration
Name
Remote Gateway
4 Select Create Phase 2.
Define the phase 2 parameters needed to create a VPN tunnel with the remote peer.
For details on phase 2, see “Phase 2 parameters” on page 57.
5 Enter the following information and select OK.
Configuring branch_2 security policies
Enter branch_2, a name to identify the VPN tunnel. This name
appears in phase 2 configurations, security policies, and the VPN
monitor.
Select Static IP Address.
The remote peer this FortiGate is connecting to has a static IP
public address.
If the remote interface is PPPoE do not select Retrieve default
gateway from server.
IP Address
Enter 172.16.20.1
The IP address of the public interface to the remote peer.
Mode
Advanced
Select Aggressive.
Enable IPsec
Interface Mode
Local ID
Name
Phase 1
Enable for a route-based VPN and when configuring policies, go
to “Creating branch_2 route-based security policies” on
page 107.
Disable for a policy-based VPN and when configuring policies,
go to “Creating branch_2 policy-based security policies” on
page 109.
If enabled, default settings are used.
Enter example.com
A character string used by the branch_2 FortiGate unit to
identify itself to the remote peer.
This value must be identical to the value in the Accept this peer
ID field of the phase 1 remote gateway configuration on the
branch_1 remote peer. See “Configuring branch_1 VPN tunnel
settings” on page 110.
Enter branch_2_phase2.
A name to identify this phase 2 configuration.
Select branch_2.
The name of the phase 1 configuration that you defined earlier.
Define security policies to permit communications between the private networks through
the VPN tunnel. Route-based and policy-based VPNs require different security policies.
For detailed information about creating security policies, see “Defining VPN security
policies” on page 64.
After defining the two address ranges, select one of “Creating branch_2 route-based
security policies” on page 107 or “Creating branch_2 policy-based security policies” on
page 109 to configure the appropriate VPN policies.
IPsec VPNs for FortiOS 4.0 MR3
106 01-434-112804-20120111
http://docs.fortinet.com/