fortigate-ipsec-40-mr3

Redundant VPN configurations Redundant route-based VPN configuration example
9 Select Create New, enter the following information, and select OK:
Configuring FortiGate_2
Service Any
Action ACCEPT
Source Interface/Zone Site_1_D
Source Address Name All
Destination Interface/Zone Internal
Destination Address Name All
Schedule Always
Service Any
Action ACCEPT
The configuration for FortiGate_2 is very similar that of FortiGate_1. You must
configure the interfaces involved in the VPN
define the phase 1 configuration for each of the four possible paths, creating a virtual
IPsec interface for each one
define the phase 2 configuration for each of the four possible paths
configure routes for the four IPsec interfaces, assigning the appropriate priorities
configure incoming and outgoing security policies between the internal interface and
each of the virtual IPsec interfaces
To configure the network interfaces
1 Go to System > Network > Interface.
2 Select the Internal interface and then select Edit. Enter the following information and
then select OK:
Addressing mode Manual
IP/Netmask 10.31.101.0/255.255.255.0
3 Select the WAN1 interface and then select Edit. Enter the following information and
then select OK:
Addressing mode Manual
IP/Netmask 192.168.20.2/255.255.255.0
4 Select the WAN2 interface and then select Edit. Enter the following information and
then select OK:
Addressing mode Manual
IP/Netmask 172.16.30.2/255.255.255.0
To configure the IPsec interfaces (phase 1 configurations)
1 Go to VPN > IPsec > Auto Key (IKE).
FortiOS Handbook v3: IPsec VPNs
01-434-112804-20120111 161
http://docs.fortinet.com/