• The FortiGate hub must be operating in NAT mode and have a static public IP address.

• Spokes may have static IP addresses, dynamic IP addresses (see “FortiGate dialup-client configurations”), or static domain names and dynamic IP addresses (see “Dynamic DNS configuration”).