fortigate-ipsec-40-mr3

Redundant VPN configurations Partially-redundant route-based VPN example
3 Select the WAN1 interface and select Edit. Enter the following information and then
select OK:
Addressing mode DHCP
To configure the two IPsec interfaces (phase 1 configurations)
1 Go to VPN > IPsec > Auto Key (IKE).
2 Select Create Phase 1, enter the following information, and select OK:
Name Site_2_A
Remote Gateway Static IP Address
IP Address 192.168.10.2
Local Interface WAN1
Mode Main
Authentication Method Preshared Key
Pre-shared Key Enter the preshared key.
Peer Options
Advanced
Accept any peer ID
Enable IPsec Interface Mode Select
Dead Peer Detection Select
3 Select Create Phase 1, enter the following information, and select OK:
Name Site_2_B
Remote Gateway Static IP Address
IP Address 172.16.20.2
Local Interface WAN1
Mode Main
Authentication Method Preshared Key
Pre-shared Key Enter the preshared key.
Peer Options
Advanced
Accept any peer ID
Enable IPsec Interface Mode Select
Dead Peer Detection Select
To define the phase 2 configurations for the two VPNs
1 Go to VPN > IPsec > Auto Key (IKE).
2 Select Create Phase 2, enter the following information and select OK:
FortiOS Handbook v3: IPsec VPNs
01-434-112804-20120111 171
http://docs.fortinet.com/