Chapter 11 IPsec VPN for FortiOS 5.0 : Hub-and-spoke configurations : Configure the spokes : Configuring security policies for hub-to-spoke communication
  
Configuring security policies for hub-to-spoke communication
1. Create an address for this spoke. See “Defining policy addresses”. Enter the IP address and netmask of the private network behind the spoke.
2. Create an address to represent the hub. See “Defining policy addresses”. Enter the IP address and netmask of the private network behind the hub.
3. Define the security policy to enable communication with the hub.