fortigate-ipsec-40-mr3

Local ID
IPsec VPN in the web-based manager
If the FortiGate unit will act as a VPN client and you are using peer
IDs for authentication purposes, enter the identifier that the
FortiGate unit will supply to the VPN server during the phase 1
exchange.
If the FortiGate unit will act as a VPN client, and you are using
security certificates for authentication, select the distinguished
name (DN) of the local server certificate that the FortiGate unit will
use for authentication purposes.
If the FortiGate unit is a dialup client and will not be sharing a
tunnel with other dialup clients (that is, the tunnel will be
dedicated to this Fortinet dialup client), set Mode to Aggressive.
Note that this Local ID value must match the peer ID value given
for the remote VPN peer’s Peer Options.
This option supports the authentication of dialup clients. It is
available for IKE v1 only.
Disable — Select if you do not use XAuth.
Enable as Client — If the FortiGate unit is a dialup client, enter
the user name and password that the FortiGate unit will need
to authenticate itself to the remote XAuth server.
Enable as Server — This is available only if Remote Gateway is
set to Dialup User. Dialup clients authenticate as members of a
XAuth
dialup user group. You must first create a user group for the
dialup clients that need access to the network behind the
FortiGate unit.
You must also configure the FortiGate unit to forward
authentication requests to an external RADIUS or LDAP
authentication server.
Select a Server Type setting to determine the type of encryption
method to use between the FortiGate unit, the XAuth client and
the external authentication server, and then select the user group
from the User Group list.
Username Enter the user name that is used for authentication.
Password Enter the password that is used for authentication.
NAT Traversal
Select the check box if a NAT device exists between the local
FortiGate unit and the VPN peer or client. The local FortiGate unit
and the VPN peer or client must have the same NAT traversal
setting (both selected or both cleared) to connect reliably.
IPsec VPNs for FortiOS 4.0 MR3
30 01-434-112804-20120111
http://docs.fortinet.com/