fortigate-ipsec-40-mr3

OSPF over IPsec configuration Protecting OSPF with IPsec
To configure OSPF area and interfaces - web-based manager
1 On FortiGate_2, go to Router > Dynamic > OSPF.
2 For Router ID, enter 10.0.0.2.
Router ID 10.0.0.2
Areas Select Create New, enter the Area and Type and then select OK.
Area 0.0.0.0
Type
Interfaces
Regular
Name Enter a name for the OSPF interface, ospf_wan1 for example.
Interface Select the virtual IPsec interface, tunnel_wan1
IP 0.0.0.0
3 For Networks, select Create New.
4 Enter the following information for the loopback interface:
IP/Netmask 10.0.0.2/255.255.255.255
Area 0.0.0.0
5 For Networks, select Create New.
6 Enter the following information for the tunnel interface:
IP/Netmask 10.1.1.0/255.255.255.0
Area 0.0.0.0
7 For Networks, select Create New.
8 Enter the following information for the local LAN interface:
IP/Netmask 10.31.101.0/255.255.255.0
Area 0.0.0.0
9 Select Apply.
To configure OSPF area and interfaces - CLI
If for example, your loopback interface is 10.0.0.2, your tunnel ends are on the
10.1.1.0/24 network, your local LAN is 10.31.101.0/24, and your virtual IPsec interface is
named tunnel_wan1, you would enter:
config router ospf
set router-id 10.0.0.2
config area
edit 0.0.0.0
end
config network
edit 1
set prefix 10.1.1.0 255.255.255.0
next
edit 2
set prefix 10.31.101.0 255.255.255.0
IPsec VPNs for FortiOS 4.0 MR3
226 01-434-112804-20120111
http://docs.fortinet.com/