How to use this guide to configure an IPsec VPN
This guide uses a task-based approach to provide all of the procedures needed to create different types of VPN configurations. Follow the step-by-step configuration procedures in this guide to set up the VPN.
The following configuration procedures are common to all IPsec VPNs:
1. Define the phase 1 parameters that the FortiGate unit needs to authenticate remote peers or clients and establish a secure a connection. See
“Auto Key phase 1 parameters”.
2. Define the phase 2 parameters that the FortiGate unit needs to create a VPN tunnel with a remote peer or dialup client. See
“Phase 2 parameters”.
3. Specify the source and destination addresses of IP packets that are to be transported through the VPN tunnel. See
“Defining policy addresses”.
4. Create an IPsec security policy to define the scope of permitted services between the IP source and destination addresses. See
“Defining VPN security policies”.