Configuring FortiGate

• define the phase 1 configuration for each of the two possible paths, creating a virtual IPsec interface for each one

• define the phase 2 configuration for each of the two possible paths

• configure incoming and outgoing security policies between the internal interface and each of the virtual IPsec interfaces

2. Select the Internal interface and select Edit. Enter the following information and select OK:


Addressing mode	Manual
IP/Netmask	10.21.101.2/255.255.255.0

3. Select the WAN1 interface and select Edit. Enter the following information and select OK:


Addressing mode	Manual
IP/Netmask	192.168.10.2/255.255.255.0

4. Select the WAN2 interface and select Edit. Enter the following information and select OK:


Addressing mode	Manual
IP/Netmask	172.16.20.2/255.255.255.0

To configure the IPsec interfaces (phase 1 configurations)

2. Select Create Phase 1, enter the following information, and select OK:

3. Select Create Phase 1, enter the following information, and select OK:

To define the phase 2 configurations for the two VPNs

2. Select Create Phase 2, enter the following information and select OK:


Name	Route_A
Phase 1	Site_1_A

3. Select Create Phase 2, enter the following information and select OK:


Name	Route_B
Phase 1	Site_1_B

For low-end FortiGate units, go to System > Network > Routing.

2. Select Create New, enter the following default gateway information and select OK:

1. Go to Policy > Policy > Policy and select Create New.

2. Leave the Policy Type as Firewall and leave the Policy Subtype as Address.

3. Enter the following information, and select OK:

5. Leave the Policy Type as Firewall and leave the Policy Subtype as Address.

6. Enter the following information, and select OK: