fortigate-ipsec-40-mr3

Phase 2 parameters
Basic phase 2 settings
FortiOS Handbook
This section describes the phase 2 parameters that are required to establish
communication through a VPN.
The following topics are included in this section:
Basic phase 2 settings
Advanced phase 2 settings
Configure the phase 2 parameters
Advanced phase 2 settings
After IPsec VPN phase 1 negotiations complete successfully, phase 2 negotiation begins.
Phase 2 parameters define the algorithms that the FortiGate unit can use to encrypt and
transfer data for the remainder of the session. The basic phase 2 settings associate IPsec
phase 2 parameters with a phase 1 configuration.
When defining phase 2 parameters, you can choose any set of phase 1 parameters to set
up a secure connection and authenticate the remote peer.
For more information on phase 2 settings in the web-based manager, see “Phase 2
configuration” on page 31
The information and procedures in this section do not apply to VPN peers that perform
negotiations using manual keys. Refer to “Manual-key configurations” on page 183
instead.
The following additional advanced phase 2 settings are available to enhance the
operation of the tunnel:
P2 Proposals
Replay detection
Perfect forward secrecy (PFS)(
Keylife
Quick mode selectors
FortiOS Handbook v3: IPsec VPNs
01-434-112804-20120111 57
http://docs.fortinet.com/