FortiGate Administration Guide - FirewallShop.com

VPN IPSEC
Auto Key
Figure 225:New Phase 2
Name Type a name to identify the phase 2 configuration.
Phase 1 Select the phase 1 tunnel configuration. See “Creating a new phase 1
configuration” on page 345. The phase 1 configuration describes how
remote VPN peers or clients will be authenticated on this tunnel, and how
the connection to the remote peer or client will be secured.
Advanced Define advanced phase 2 parameters. See “Defining phase 2 advanced
settings” on page 351.
Defining phase 2 advanced settings
In phase 2, the FortiGate unit and the VPN peer or client exchange keys again to
establish a secure communication channel between them. The P2 Proposal
parameters select the encryption and authentication algorithms needed to
generate keys for protecting the implementation details of Security Associations
(SAs). The keys are generated automatically using a Diffie-Hellman algorithm.
A number of additional advanced phase 2 settings are available to enhance the
operation of the tunnel. To modify IPSec phase 2 advanced parameters, go to
VPN > IPSEC Auto Key (IKE), select Create Phase 2, and then select
Advanced.For information about how to choose the correct advanced phase 2
settings for your particular situation, see the FortiGate IPSec VPN User Guide.
Figure 226:Phase 2 advanced settings
Add
FortiGate Version 3.0 MR5 Administration Guide
01-30005-0203-20070830 351