FortiGate Administration Guide - FirewallShop.com

Manual Key
VPN IPSEC
VPN Tunnel
Select the tunnel that provides access to the private
network behind the FortiGate unit.
Inbound NAT
Enable
Configure other settings as required.
Route-based VPN Internet browsing configuration
Configure an additional firewall policy as follows:
Source Interface/Zone Select the IPSec interface.
Source Address Name Select All
Destination Interface/Zone Select the FortiGate unit public interface.
Destination Address Name Select All
Action
Select ACCEPT.
NAT
Enable
Configure other settings as required.
Manual Key
If required, you can manually define cryptographic keys for establishing an IPSec
VPN tunnel. You would define manual keys in situations where:
• Prior knowledge of the encryption and/or authentication key is required (that is,
one of the VPN peers requires a specific IPSec encryption and/or
authentication key).
• Encryption and authentication needs to be disabled.
In both cases, you do not specify IPSec phase 1 and phase 2 parameters; you
define manual keys on the VPN > IPSEC > Manual Key page instead.
Note: It may not be safe or practical to define manual keys because network administrators
must be trusted to keep the keys confidential, and propagating changes to remote VPN
peers in a secure manner may be difficult.
For general information about how to configure an IPSec VPN, see the FortiGate
IPSec VPN User Guide.
Figure 227:Manual Key list
Edit
Delete
Create New
Tunnel Name
Remote Gateway
Create a new manual key configuration. See “Creating a new
manual key configuration” on page 355.
The names of existing manual key configurations.
The IP addresses of remote peers or dialup clients.
FortiGate Version 3.0 MR5 Administration Guide
354 01-30005-0203-20070830