Chapter 11 IPsec VPN for FortiOS 5.0 : Dynamic DNS configuration : Configure the dynamically-addressed VPN peer : Configuring branch_2 security policies
  
Configuring branch_2 security policies
Define security policies to permit communications between the private networks through the VPN tunnel. Route-based and policy-based VPNs require different security policies. For detailed information about creating security policies, see “Defining VPN security policies”.
After defining the two address ranges, select one of “Creating branch_2 route-based security policies” or “Creating branch_2 policy-based security policies” to configure the appropriate VPN policies.