Chapter 11 IPsec VPN for FortiOS 5.0 : Hub-and-spoke configurations : Configure the hub : Define the hub-spoke security policies
  
Define the hub-spoke security policies
1. Define a name for the address of the private network behind the hub. For more information, see “Defining policy addresses”.
2. Define names for the addresses or address ranges of the private networks behind the spokes. For more information, see “Defining policy addresses”.
3. Define the VPN concentrator. See “To define the VPN concentrator”.
4. Define security policies to permit communication between the hub and the spokes. For more information, see “Defining VPN security policies”.