FortiGate Administration Guide - FirewallShop.com

VPN IPSEC
Concentrator
Concentrator
In a hub-and-spoke configuration, policy-based VPN connections to a number of
remote peers radiate from a single, central FortiGate unit. Site-to-site connections
between the remote peers do not exist; however, VPN tunnels between any two of
the remote peers can be established through the FortiGate unit “hub”.
In a hub-and-spoke network, all VPN tunnels terminate at the hub. The peers that
connect to the hub are known as “spokes”. The hub functions as a concentrator
on the network, managing all VPN connections between the spokes. VPN traffic
passes from one tunnel to the other through the hub.
You define a concentrator to include spokes in the hub-and-spoke configuration.
To define a concentrator, go to VPN > IPSEC > Concentrator. For detailed
information and step-by-step procedures about how to set up a hub-and-spoke
configuration, see the FortiGate IPSec VPN User Guide.
Figure 229:Concentrator list
Edit
Delete
Create New
Defining concentrator options
A concentrator configuration specifies which spokes to include in an IPSec huband-spoke
configuration.
To specify the spokes of an IPSec hub-and-spoke configuration, go to VPN >
IPSEC > Concentrator and select Create New.
Figure 230:New VPN Concentrator
Define a new concentrator for an IPSec hub-and-spoke
configuration. See “Defining concentrator options” on page 357.
Concentrator Name The names of existing IPSec VPN concentrators.
Members
The tunnels that are associated with the concentrators.
Delete and Edit Delete or edit a concentrator.
icons
FortiGate Version 3.0 MR5 Administration Guide
01-30005-0203-20070830 357