fortigate-ipsec-40-mr3

Authenticating remote peers and clients Auto Key phase 1 parameters
To authenticate dialup clients using unique preshared keys and/or peer IDs
1 At the FortiGate VPN server, go to VPN > IPsec > Auto Key (IKE).
2 In the list, select the Edit icon of a phase 1 configuration to edit its parameters.
3 If the clients have unique peer IDs, set Mode to Aggressive.
4 Clear the Pre-shared Key field.
The user account password will be used as the preshared key.
5 Select Accept peer ID in dialup group and then select the group name from the list of
user groups.
6 Select OK.
Follow this procedure to add a unique pre-shared key and unique peer ID to an existing
FortiClient configuration.
To configure FortiClient - pre-shared key and peer ID
1 Start the FortiClient Endpoint Security application.
2 Go to VPN > Connections, select the existing configuration.
3 Select Advanced > Edit.
4 In the Preshared Key field, type the FortiGate password that belongs to the dialup
client (for example, 1234546).
The user account password will be used as the preshared key.
5 Select Advanced.
6 Under Policy, select Config.
7 In the Local ID field, type the FortiGate user name that you assigned previously to the
dialup client (for example, FortiC1ient1).
8 Select OK to close all dialog boxes.
Configure all FortiClient dialup clients this way using unique preshared keys and local
IDs.
Follow this procedure to add a unique pre-shared key to an existing FortiClient
configuration.
To configure FortiClient - preshared key only
1 Start the FortiClient Endpoint Security application.
2 Go to VPN > Connections, select the existing configuration
3 Select Advanced > Edit.
4 In the Preshared Key field, type the user name, followed by a “+” sign, followed by the
password that you specified previously in the user account settings on the FortiGate
unit (for example, FC2+1FG6LK)
5 Select OK to close all dialog boxes.
Configure all the FortiClient dialup clients this way using their unique peer ID and
pre-shared key values.
IPsec VPNs for FortiOS 4.0 MR3
48 01-434-112804-20120111
http://docs.fortinet.com/