fortigate-ipsec-40-mr3

FortiOS Handbook
Transparent mode VPNs
This section describes transparent VPN configurations, in which two FortiGate units
create a VPN tunnel between two separate private networks transparently.
The following topics are included in this section:
Configuration overview
Configuration overview
Configure the VPN peers
In transparent mode, all interfaces of the FortiGate unit except the management interface
(which by default is assigned IP address 10.10.10.1/255.255.255.0) are invisible at the
network layer. Typically, when a FortiGate unit runs in transparent mode, different network
segments are connected to the FortiGate interfaces. Figure 25 shows the management
station on the same subnet. The management station can connect to the FortiGate unit
directly through the web-based manager.
Figure 25: Management station on internal network
Management
station
FortiGate_1 FortiG
Edge router
Site_1
10.10.10.0/24
10.10.10.1
An edge router typically provides a public connection to the Internet and one interface of
the FortiGate unit is connected to the router. If the FortiGate unit is managed from an
external address (see Figure 26 on page 176), the router must translate (NAT) a routable
address to direct management traffic to the FortiGate management interface.
FortiOS Handbook v3: IPsec VPNs
01-434-112804-20120111 175
http://docs.fortinet.com/