FortiGate IPSec VPN User Guide - FirewallShop.com

Gateway-to-gateway configurations
Configuration example
2 Select Create New, enter the following information, and select OK:
Address Name
Subnet/IP Range
Enter an address name (for example, HR_Network).
Enter the IP address of the private network behind
FortiGate_2 (for example, 192.168.22.0/24).
To define the firewall policy for a policy-based VPN
1 Go to Firewall > Policy.
2 Select Create New, enter the following information, and select OK:
Source Interface/Zone Port 1
Source Address Name Finance_Network
Destination Interface/Zone Port 2
Destination Address Name HR_Network
Schedule
As required.
Service
As required.
Action
IPSEC
VPN Tunnel
FG1toFG2_Tunnel
Allow Inbound
Enable
Allow Outbound
Enable
Inbound NAT
Disable
3 Place the policy in the policy list above any other policies having similar source
and destination addresses.
To define firewall policies for a route-based VPN
1 Go to Firewall > Policy.
2 Select Create New, enter the following information, and select OK:
Source Interface/Zone Port 1
Source Address Name Finance_Network
Destination Interface/Zone FG1toFG2_Tunnel
Destination Address Name HR_Network
Schedule
As required.
Service
As required.
Action
ACCEPT
NAT
Disable
3 Select Create New, enter the following information, and select OK:
Source Interface/Zone FG1toFG2_Tunnel
Source Address Name HR_Network
Destination Interface/Zone Port 1
Destination Address Name Finance_Network
Schedule
As required.
Service
As required.
Action
ACCEPT
NAT
Disable
FortiGate IPSec VPN Version 3.0 User Guide
01-30005-0065-20070716 25