FortiGate IPSec VPN User Guide - FirewallShop.com

Gateway-to-gateway configurations
Configuration example
To define the phase 2 parameters
1 Go to VPN > IPSEC > Auto Key.
2 Select Create Phase 2, enter the following information and select OK:
Name
Phase 1
Enter a name for the phase 2 configuration (for
example, FG2toFG1_phase2).
Select the gateway that you defined previously (for
example, FG2toFG1_Tunnel).
To define the IP address of the network behind FortiGate_2
1 Go to Firewall > Address.
2 Select Create New, enter the following information, and select OK:
Address Name
Enter an address name (for example, HR_Network).
Subnet/IP Range 192.168.22.0/24
This is the IP address of the private network behind
FortiGate_2.
To define the IP address of the network behind FortiGate_1
1 Go to Firewall > Address.
2 Select Create New, enter the following information, and select OK:
Address Name
Subnet/IP Range
Enter an address name (for example,
Finance_Network).
Enter the IP address of the private network behind
FortiGate_1 (for example, 192.168.12.0/24).
To define the firewall policy for a policy-based VPN
1 Go to Firewall > Policy.
2 Select Create New, enter the following information, and select OK:
Source Interface/Zone Port 2
Source Address Name HR_Network
Destination Interface/Zone Port 1
Destination Address Name Finance_Network
Schedule
As required.
Service
As required.
Action
IPSEC
VPN Tunnel
FG2toFG1_Tunnel
Allow Inbound
Enable
Allow Outbound
Enable
Inbound NAT
Disable
3 Place the policy in the policy list above any other policies having similar source
and destination addresses.
FortiGate IPSec VPN Version 3.0 User Guide
01-30005-0065-20070716 27