278
01-28006-0068-20041105
Fortinet Inc.
ipsec vip
VPN
Authenticating peers with preshared keys
If both VPN peers can use the same preshared key to authenticate themselves to
each other, you can enter the preshared key at each peer.
To configure an AutoIKE VPN with preshared keys
1
Add a phase 1 configuration to define the parameters used to authenticate the remote
VPN peer.
Although the remote VPN peer can be either a client or a gateway, this step is often
referred to as “adding a remote gateway.”
For a preshared key VPN, set authentication method to Preshared key.
2
Set other phase 1 options as required.
See
“Phase 1” on page 246
.
3
Add the phase 2 configuration to define the parameters used to create and maintain
the AutoKey VPN tunnel.
This step is often referred to as “adding a tunnel.” See
“Phase 2” on page 250
.
4
Add the firewall configuration required for the VPN.
See
“Adding firewall policies for IPSec VPN tunnels” on page 280
.
Gateway-to-gateway VPN
Using a peer to peer VPN, users on a network behind a VPN gateway can connect to
another remote network behind a remote VPN gateway. Both VPN gateways or peers
are FortiGate units or other VPN gateways with static IP addresses.
To configure a gateway-to-gateway VPN
1
Add a phase 1 configuration to define the parameters used to authenticate the remote
VPN peer.
2
Set Remote Gateway to static.
3
Set other phase 1 options as required.
See
“Phase 1” on page 246
.
4
Add the phase 2 configuration to define the parameters used to create and maintain
the AutoKey VPN tunnel.
See
“Phase 2” on page 250
.
5
Add the firewall configuration required for the VPN.
See
“Adding firewall policies for IPSec VPN tunnels” on page 280
.
6
Configure remote VPN clients with a matching IPSec VPN configuration.
Summary of Contents for FortiGate FortiGate-100A
Page 24: ...24 01 28006 0068 20041105 Fortinet Inc FortiLog documentation Introduction...
Page 72: ...72 01 28006 0068 20041105 Fortinet Inc Transparent mode VLAN settings System network...
Page 80: ...80 01 28006 0068 20041105 Fortinet Inc DHCP IP MAC binding settings System DHCP...
Page 114: ...114 01 28006 0068 20041105 Fortinet Inc Access profile options System administration...
Page 232: ...232 01 28006 0068 20041105 Fortinet Inc CLI configuration Firewall...
Page 244: ...244 01 28006 0068 20041105 Fortinet Inc peergrp Users and authentication...
Page 320: ...320 01 28006 0068 20041105 Fortinet Inc service smtp Antivirus...
Page 366: ...366 01 28006 0068 20041105 Fortinet Inc syslogd setting Log Report...
Page 380: ...380 01 28006 0068 20041105 Fortinet Inc Glossary...
Page 388: ...388 01 28006 0068 20041105 Fortinet Inc Index...