Chapter 11 IPsec VPN for FortiOS 5.0 : FortiClient dialup-client configurations : Configure the FortiGate unit
  
Configure the FortiGate unit
Configuring the FortiGate unit to establish VPN connections with FortiClient Endpoint Security users involves the following steps:
Configure the VPN settings
If the dialup clients use automatic configuration, configure the FortiGate unit as a VPN policy server
If the dialup clients obtain VIP addresses by DHCP over IPsec, configure an IPsec DHCP server or relay
The procedures in this section cover basic setup of policy-based and route-based VPNs compatible with FortiClient Endpoint Security. A route-based VPN is simpler to configure.