fortigate-ipsec-40-mr3

Redundant VPN configurations Partially-redundant route-based VPN example
Enable IPsec Interface Mode Select
Dead Peer Detection Select
3 Select Create Phase 1, enter the following information, and select OK:
Name Site_1_B
Remote Gateway Dialup User
Local Interface WAN2
Mode Main
Authentication Method Preshared Key
Pre-shared Key Enter the preshared key.
Peer Options
Advanced
Accept any peer ID
Enable IPsec Interface Mode Select
Dead Peer Detection Select
To define the phase 2 configurations for the two VPNs
1 Go to VPN > IPsec > Auto Key (IKE).
2 Select Create Phase 2, enter the following information and select OK:
Name Route_A.
Phase 1 Site_1_A
3 Select Create Phase 2, enter the following information and select OK:
Name Route_B.
Phase 1 Site_1_B
To configure routes
1 Go to Router > Static > Static Route.
2 Select Create New, enter the following default gateway information and then select
OK:
Destination
IP/Mask
0.0.0.0/0.0.0.0
Device WAN1
Gateway 192.168.10.1
Distance 10
FortiOS Handbook v3: IPsec VPNs
01-434-112804-20120111 169
http://docs.fortinet.com/