fortigate-ipsec-40-mr3

Concentrator
Local Interface
Encryption
Algorithm
Authentication
Algorithm
IPsec Interface
Mode
IPsec VPN in the web-based manager
This option is available in NAT mode only. Select the name of the
interface to which the IPsec tunnel will be bound. The FortiGate unit
obtains the IP address of the interface from the network interface
settings.
Select one of the following symmetric-key encryption algorithms:
NULL — Do not use an encryption algorithm.
DES — Digital Encryption Standard, a 64-bit block algorithm that
uses a 56-bit key.
3DES — Triple-DES, where plain text is encrypted three times by
three keys.
AES128 — a 128-bit block Cipher Block Chaining algorithm that
uses a 128-bit key.
AES192 — a 128-bit block Cipher Block Chaining ) algorithm that
uses a 192-bit key.
AES256 — a 128-bit block Cipher Block Chaining algorithm that
uses a 256-bit key.
Note: The algorithms for encryption and authentication cannot both
be NULL.
Select one of the following message digests:
NULL –– Do not use a message digest.
MD5 — Message Digest 5 algorithm, which produces a 128-bit
message digest.
SHA1 — Secure Hash Algorithm 1, which produces a 160-bit
message digest.
SHA256 — Secure Hash Algorithm 2, which produces a 256-bit
message digest.
SHA384 – Secure Hash Algorithm 2, which produces a 384-bit
message digest.
SHA512 – Secure Has Algorithm 2, which produces a 512-bit
message digest.
Note: The Algorithms for encryption and authentication cannot both
be NULL.
Create a virtual interface for the local end of the VPN tunnel. Select
this check box to create a route-based VPN, clear it to create a
policy-based VPN.
This is available only in NAT mode.
In a hub-and-spoke configuration, policy-based VPN connections to a number of remote
peers radiate from a single, central FortiGate unit. Site-to-site connections between the
remote peers do not exist; however, you can establish VPN tunnels between any two of
the remote peers through the FortiGate unit’s “hub”.
In a hub-and-spoke network, all VPN tunnels terminate at the hub. The peers that
connect to the hub are known as “spokes”. The hub functions as a concentrator on the
network, managing all VPN connections between the spokes. VPN traffic passes from
one tunnel to the other through the hub.
IPsec VPNs for FortiOS 4.0 MR3
36 01-434-112804-20120111
http://docs.fortinet.com/