VPN authentication
All VPN configurations require users to authenticate. Authentication based on user groups applies to:
• SSL VPNs
• PPTP and L2TP VPNs
• an IPsec VPN that authenticates users using dialup groups
• a dialup IPsec VPN that uses XAUTH authentication (Phase 1)
You must create user accounts and user groups before performing the procedures in this section. If you create a user group for dialup IPsec clients or peers that have unique peer IDs, their user accounts must be stored locally on the FortiGate unit. You cannot authenticate these types of users using a RADIUS or LDAP server.