FortiGate Administration Guide - FirewallShop.com

Auto Key
VPN IPSEC
To define basic IPSec phase 1 parameters, go to VPN > IPSEC > Auto Key (IKE)
and select Create Phase 1. For information about how to choose the correct
phase 1 settings for your particular situation, see the FortiGate IPSec VPN User
Guide.
Figure 223:New Phase 1
Name
Remote Gateway
IP Address
Dynamic DNS
Local Interface
Type a name to represent the phase 1 definition. The maximum
name length is 15 characters for an interface mode VPN, 35
characters for a policy-based VPN. If Remote Gateway is Dialup
User, the maximum name length is further reduced depending on the
number of dialup tunnels that can be established: by 2 for up to 9
tunnels, by 3 for up to 99 tunnels, 4 for up to 999 tunnels, and so on.
For a tunnel mode VPN, the name should reflect the origination of
the remote connection. For a route-based tunnel, the FortiGate unit
also uses the name for the virtual IPSec interface that it creates
automatically.
Select the nature of the remote connection:
• If the remote peer has a static IP address, select Static IP
Address.
• If one or more FortiClient or FortiGate dialup clients with
dynamic IP addresses will connect to the FortiGate unit, select
Dialup User.
• If a remote peer that has a domain name and subscribes to a
dynamic DNS service will be connecting to the FortiGate unit,
select Dynamic DNS.
If Static IP Address is selected, type the IP address of the remote
peer.
If Dynamic DNS is selected, type the domain name of the remote
peer.
This option is available in NAT/Route mode only. Select the name of
the interface through which remote peers or dialup clients connect to
the FortiGate unit. The FortiGate unit obtains the IP address of the
interface from System > Network > Interface settings (see
“Interface” on page 79) unless you are configuring an IPSec
interface, in which case you can specify a different IP address in the
Local Gateway IP field under Advanced settings (see “Local
Gateway IP” on page 349).
FortiGate Version 3.0 MR5 Administration Guide
346 01-30005-0203-20070830