fortigate-ipsec-40-mr3

FortiClient dialup-client configuration example FortiClient dialup-client configurations
Action ACCEPT
NAT Disable
5 Place these policies in the policy list above any other policies having similar source
and destination addresses.
The policy in step 4 is required for DHCP to function properly for policy-based VPNs. You
can omit this policy if you change the Destination Address Name to all in the step
before. Route-based policies are not affected by this.
To define the security policy - policy-based VPN
1 Go to Policy > Policy > Policy.
2 Select Create New, enter the following information, and select OK:
Source Interface/Zone Port 2
Source Address Name internal_net
Destination Interface/Zone Port 1
Destination Address Name dialups
Schedule As required.
Service As required.
Action IPSEC
VPN Tunnel todialups.
Allow Inbound Enable
Enable if you want to allow hosts on the private
network behind the FortiGate unit to initiate
Allow Outbound
communications with the FortiClient users after the
tunnel is established.
Inbound NAT Disable
Outbound NAT Disable
3 Place the policy in the policy list above any other policies having similar source and
destination addresses.
To configure a DHCP server on the FortiGate unit
1 Go to System > DHCP Server and select Create New.
2 Enter the following information and select OK:
Interface Name
Route-based VPN: select virtual IPsec interface. For example,
todialups.
Policy-based VPN: select the public interface. For example,
Port 1.
Mode Server
Type IPSEC.
IP Range 10.254.254.1 - 10.254.254.10
IPsec VPNs for FortiOS 4.0 MR3
130 01-434-112804-20120111
http://docs.fortinet.com/