fortigate-ipsec-40-mr3

Partially-redundant route-based VPN example Redundant VPN configurations
Name Route_A.
Phase 1
Advanced
Site_2_A
Source Address 10.31.101.0/24
3 Select Create Phase 2, enter the following information and select OK:
Name Route_B.
Phase 1
Advanced
Site_2_B
Source Address 10.31.101.0/24
To configure routes
1 Go to Router > Static > Static Route.
2 Select Create New, enter the following information and then select OK:
Destination IP/Mask 10.21.101.0/255.255.255.0
Device Site_2_A
Distance 1
3 Select Create New, enter the following information and then select OK:
Destination IP/Mask 10.21.101.0/255.255.255.0
Device Site_2_B
Distance 2
To configure security policies
1 Go to Policy > Policy > Policy.
2 Select Create New, enter the following information, and select OK:
Source Interface/Zone Internal
Source Address Name All
Destination Interface/Zone Site_2_A
Destination Address Name All
Schedule Always
Service Any
Action ACCEPT
3 Select Create New, enter the following information, and select OK:
IPsec VPNs for FortiOS 4.0 MR3
172 01-434-112804-20120111
http://docs.fortinet.com/