FortiGate IPSec VPN User Guide - FirewallShop.com

Redundant route-based VPN configuration example
Redundant VPN configurations
Name
Site_2_C
Remote Gateway
Static IP Address
IP Address 10.10.10.2
Local Interface
WAN2
Mode
Main
Authentication Method
Preshared Key
Pre-shared Key
Enter the preshared key.
Peer Options
Accept any peer ID
Advanced
Enable IPSec Interface Mode Select
Dead Peer Detection
Select
5 Select Create Phase 1, enter the following information, and select OK:
Name
Site_2_D
Remote Gateway
Static IP Address
IP Address 172.16.20.2
Local Interface
WAN1
Mode
Main
Authentication Method
Preshared Key
Pre-shared Key
Enter the preshared key.
Peer Options
Accept any peer ID
Advanced
Enable IPSec Interface Mode Select
Dead Peer Detection
Select
To define the phase 2 configurations for the four VPNs
1 Go to VPN > IPSEC > Auto Key.
2 Select Create Phase 2, enter the following information and select OK:
Name
Phase 1
Route_A.
Site_2_A
3 Select Create Phase 2, enter the following information and select OK:
Name
Phase 1
Route_B.
Site_2_B
4 Select Create Phase 2, enter the following information and select OK:
Name
Phase 1
Route_C.
Site_2_C
5 Select Create Phase 2, enter the following information and select OK:
Name
Phase 1
Route_D.
Site_2_D
FortiGate IPSec VPN Version 3.0 User Guide
94 01-30005-0065-20070716