FortiGate IPSec VPN User Guide - FirewallShop.com

Contents
Authentication ............................................................................................. 35
Configure the hub............................................................................................ 35
Define the hub-spoke VPNs........................................................................ 35
Define the hub-spoke firewall policies......................................................... 36
Configuring communication between spokes (policy-based VPN) ............. 37
Configuring communication between spokes (route-based VPN) .............. 38
Using a zone as a concentrator............................................................ 38
Using a zone with a policy as a concentrator ....................................... 38
Using firewall policies as a concentrator .............................................. 39
Configure the spokes ..................................................................................... 40
Configuring firewall policies for hub-to-spoke communication .................... 40
Configuring firewall policies for spoke-to-spoke communication ................ 41
Dynamic spokes configuration example....................................................... 42
Configure the hub (FortiGate_1) ................................................................. 43
Define the IPsec configuration.............................................................. 43
Define the firewall policies .................................................................... 43
Configure communication between spokes.......................................... 44
Configure the spokes .................................................................................. 45
Define the IPsec configuration.............................................................. 45
Define the firewall policies .................................................................... 46
Dynamic DNS configurations ......................................................... 49
Configuration overview................................................................................... 49
Dynamic DNS infrastructure requirements ................................................ 50
General configuration steps .......................................................................... 50
Configure the dynamically-addressed VPN peer ......................................... 51
Configure the fixed-address VPN peer ......................................................... 53
FortiClient dialup-client configurations......................................... 55
Configuration overview................................................................................... 55
Peer identification ....................................................................................... 56
Automatic configuration of FortiClient dialup clients ................................... 56
How the FortiGate unit determines which settings to apply .......... 56
Using virtual IP addresses .......................................................................... 57
FortiClient dialup-client infrastructure requirements .................................. 58
FortiClient-to-FortiGate VPN configuration steps ....................................... 59
Configure the FortiGate unit........................................................................... 59
Configuring FortiGate unit VPN settings ..................................................... 60
Configuring the FortiGate unit as a VPN policy server ............................... 62
Configuring DHCP service on the FortiGate unit ........................................ 62
Configure the FortiClient Host Security application ................................... 64
Configuring FortiClient to work with VPN policy distribution ....................... 64
Configuring FortiClient manually................................................................. 64
FortiGate IPSec VPN Version 3.0 User Guide
4 01-30005-0065-20070716