fortigate-ipsec-40-mr3

Partially-redundant route-based VPN example Redundant VPN configurations
Configuring FortiGate_1
You must
configure the interfaces involved in the VPN
define the phase 1 configuration for each of the two possible paths, creating a virtual
IPsec interface for each one
define the phase 2 configuration for each of the two possible paths
configure incoming and outgoing security policies between the internal interface and
each of the virtual IPsec interfaces
To configure the network interfaces
1 Go to System > Network > Interface.
2 Select the Internal interface and select Edit. Enter the following information and then
select OK:
Addressing mode Manual
IP/Netmask 10.21.101.2/255.255.255.0
3 Select the WAN1 interface and select Edit. Enter the following information and then
select OK:
Addressing mode Manual
IP/Netmask 192.168.10.2/255.255.255.0
4 Select the WAN2 interface and select Edit. Enter the following information and then
select OK:
Addressing mode Manual
IP/Netmask 172.16.20.2/255.255.255.0
To configure the IPsec interfaces (phase 1 configurations)
1 Go to VPN > IPsec > Auto Key (IKE).
2 Select Create Phase 1, enter the following information, and select OK:
Name Site_1_A
Remote Gateway Dialup User
Local Interface WAN1
Mode Main
Authentication Method Preshared Key
Pre-shared Key Enter the preshared key.
Peer Options
Advanced
Accept any peer ID
IPsec VPNs for FortiOS 4.0 MR3
168 01-434-112804-20120111
http://docs.fortinet.com/