Configuring FortiGate

• Configure the interfaces involved in the VPN.

• Define the Phase 1 configuration for each of the two possible paths, creating a virtual IPsec interface for each one.

• Define the Phase 2 configuration for each of the two possible paths.

• Configure incoming and outgoing security policies between the internal interface and each of the virtual IPsec interfaces.

2. Select the Internal interface and select Edit. Enter the following information and select OK:


Addressing mode	Manual
IP/Netmask	10.21.101.2/255.255.255.0

3. Select the WAN1 interface and select Edit. Enter the following information and select OK:


Addressing mode	Manual
IP/Netmask	192.168.10.2/255.255.255.0

4. Select the WAN2 interface and select Edit. Enter the following information and select OK:


Addressing mode	Manual
IP/Netmask	172.16.20.2/255.255.255.0

To configure the IPsec interfaces (Phase 1 configurations)

1. Go to VPN > IPsec > Tunnels and create the new custom tunnel or edit an existing tunnel.

2. Edit the Phase 1 Proposal (if it is not available, you may need to click the Convert to Custom Tunnel button).

3. Enter the following information, and select OK:

4. Create a new tunnel and enter the following Phase 1 information:

To define the Phase 2 configurations for the two VPNs

2. Enter the following information and select OK:


Name	Route_A
Phase 1	Site_1_A

3. Enter the following Phase 2 information for the subsequent route:


Name	Route_B
Phase 1	Site_1_B

1. Go to Router > Static > Static Routes.

For low-end FortiGate units, go to System > Network > Routing.

2. Select Create New, enter the following default gateway information and select OK:

1. Go to Policy & Objects > Policy > IPv4 and select Create New.

2. Leave the Policy Type as Firewall and leave the Policy Subtype as Address.

3. Enter the following information, and select OK:

5. Leave the Policy Type as Firewall and leave the Policy Subtype as Address.

6. Enter the following information, and select OK: