Chapter 11 IPsec VPN for FortiOS 5.0 : Hub-and-spoke configurations : Dynamic spokes configuration example : Configure the hub (FortiGate_1)
  
Configure the hub (FortiGate_1)
The phase 1 configuration defines the parameters that FortiGate_1 will use to authenticate spokes and establish secure connections.
For the purposes of this example, one preshared key will be used to authenticate all of the spokes. Each key must contain at least 6 printable characters and best practices dictates that it only be known by network administrators. For optimum protection against currently known attacks, each key must consist of a minimum of 16 randomly chosen alphanumeric characters.