To Next Page

To Previous Page

FortiGate-1000 Administration Guide Version 2.80 MR6

FortiGate-1000 Administration Guide 01-28006-0009-20041105 247

VPN

FortiGate units support the following protocols to authenticate and encrypt traffic:

• Internet Protocol Security (IPSec)

• Point-to-Point Tunneling Protocol (PPTP)

• Layer Two Tunneling Protocol (L2TP)

This chapter contains information about the following VPN topics:

• Phase 1

• Phase 2

• Manual key

• Concentrator

• Ping Generator

• Monitor

• PPTP

• L2TP

• Certificates

• CLI configuration

• Authenticating peers with preshared keys

• Gateway-to-gateway VPN

• Dialup VPN

• Dynamic DNS VPN

• Manual key IPSec VPN

• Adding firewall policies for IPSec VPN tunnels

• Internet browsing through a VPN tunnel

• IPSec VPN in Transparent mode

• Hub and spoke VPNs

• Redundant IPSec VPNs

• Configuring IPSec virtual IP addresses

• Troubleshooting

Default Chapter3
- Table of Contents3
Introduction13
- About Fortigate Antivirus Firewalls13
- Document Conventions20
- Fortigate Documentation22
  - Comments on Fortinet Technical Documentation22
- Related Documentation22
- Customer Service and Technical Support24
System Status25
- Console Access25
- Status26
  - Viewing System Status26
  - Changing Unit Information29
- Session List31
- Changing the Fortigate Firmware32
System Network47
- Interface47
  - Interface Settings48
  - Configuring Interfaces53
- Zone57
  - Zone Settings58
- Management59
- Dns60
- Routing Table (Transparent Mode)61
  - Routing Table List61
  - Transparent Mode Route Settings62
- VLAN Overview62
  - Fortigate Units and Vlans63
- Vlans in Nat/Route Mode63
- Vlans in Transparent Mode66
- Fortigate Ipv6 Support71
System DHCP73
- Service73
  - DHCP Service Settings74
- Server75
  - DHCP Server Settings76
- Exclude Range77
  - DHCP Exclude Range Settings78
- IP/MAC Binding78
  - DHCP IP/MAC Binding Settings79
- Dynamic IP79
System Config81
- System Time81
- Options82
- Snmp98
- Replacement Messages106
  - Replacement Messages List107
  - Changing Replacement Messages108
- Fortimanager109
System Administration111
- Administrators111
  - Administrators List112
  - Administrators Options112
- Access Profiles113
  - Access Profile List114
  - Access Profile Options114
System Maintenance117
- Backup and Restore117
  - Backing up and Restoring118
- Update Center120
- Support127
  - Sending a Bug Report128
  - Registering a Fortigate Unit129
- Shutdown131
System Virtual Domain133
- Virtual Domain Properties134
- Virtual Domains136
- Configuring Virtual Domains138
Router143
- Static143
  - Static Route List145
  - Static Route Options146
- Policy147
  - Policy Route List147
  - Policy Route Options148
- Rip148
- Router Objects156
- Monitor164
  - Routing Monitor List164
- CLI Configuration165
Firewall191
- Policy192
- Address200
- Service204
- Schedule212
- Virtual IP216
- IP Pool220
- Protection Profile223
Users and Authentication235
- Setting Authentication Timeout236
- Local236
  - Local User List236
  - Local User Options236
- Radius237
  - RADIUS Server List237
  - RADIUS Server Options238
- Ldap238
  - LDAP Server List239
  - LDAP Server Options239
- User Group241
  - User Group List241
  - User Group Options242
- CLI Configuration243
  - Peer243
  - Peergrp244
Vpn247
- Phase 1248
  - Phase 1 List248
  - Phase 1 Basic Settings249
  - Phase 1 Advanced Options250
  - Configuring Xauth251
- Phase 2252
  - Phase 2 List252
  - Phase 2 Basic Settings253
  - Phase 2 Advanced Options254
- Manual Key255
  - Manual Key List256
  - Manual Key Options256
- Concentrator257
  - Concentrator List257
  - Concentrator Options258
- Ping Generator258
  - Ping Generator Options259
- Monitor259
  - Dialup Monitor260
  - Static IP and Dynamic DNS Monitor260
- Pptp261
  - Setting up a PPTP-Based VPN261
  - Enabling PPTP and Specifying a PPTP Range262
  - Configuring a Windows 2000 Client for PPTP263
  - Configuring a Windows XP Client for PPTP263
  - PPTP Passthrough264
- L2Tp265
  - Setting up a L2TP-Based VPN266
  - Enabling L2TP and Specifying an L2TP Range266
  - Configuring a Windows 2000 Client for L2TP267
  - Configuring a Windows XP Client for L2TP268
- Certificates270
  - Viewing the Certificate List271
  - Generating a Certificate Request271
  - Installing a Signed Certificate273
  - Enabling VPN Access for Specific Certificate Holders274
- CLI Configuration275
  - Ipsec Phase1275
  - Ipsec Phase2277
  - Ipsec Vip278
- Authenticating Peers with Preshared Keys280
- Gateway-To-Gateway VPN280
- Dialup VPN281
- Dynamic DNS VPN281
- Manual Key Ipsec VPN282
- Adding Firewall Policies for Ipsec VPN Tunnels282
  - Setting the Encryption Policy Direction282
  - Setting the Source Address for Encrypted Traffic282
  - Setting the Destination Address for Encrypted Traffic283
  - Adding an Ipsec Firewall Encryption Policy283
- Internet Browsing through a VPN Tunnel283
  - Configuring Internet Browsing through a VPN Tunnel284
- Ipsec VPN in Transparent Mode285
  - Special Rules285
- Hub and Spoke Vpns286
  - Configuring the Hub286
  - Adding a Vpn Concentrator287
  - Configuring Spokes288
- Redundant Ipsec Vpns289
  - Configuring Redundant Ipsec Vpns289
- Configuring Ipsec Virtual IP Addresses290
- Troubleshooting292
Ips293
- Signature294
  - Predefined294
  - Custom298
    - Adding Custom Signatures299
    - Backing up and Restoring Custom Signature Files299
- Anomaly300
  - Configuring an Anomaly301
  - Anomaly CLI Configuration303
- Configuring IPS Logging and Alert Email304
- Default Fail Open Setting304
Antivirus305
- File Block306
  - File Block List307
  - Configuring the File Block List308
- Quarantine308
- Config312
- CLI Configuration314
Web Filter323
- Content Block324
- URL Block326
- URL Exempt329
- Category Block331
- Script Filter335
  - Web Script Filter Options336
Spam Filter337
- Order of Spam Filter Operations339
- IP Address340
- Rbl & Ordbl341
- Email Address343
- MIME Headers344
- Banned Word346
- Using Perl Regular Expressions348
Log & Report351
- Log Config352
- Log Access361
- CLI Configuration366
  - Fortilog Setting366
  - Syslogd Setting367
Fortiguard Categories371
Fortigate Maximum Values377
Glossary381
Index385

Brand	Fortinet
Model	FortiGate FortiGate-1000
Category	Firewall
Language	English

Fortinet FortiGate FortiGate-1000 Administration Guide

Table of Contents

Other manuals for Fortinet FortiGate FortiGate-1000

Questions and Answers:

Fortinet FortiGate FortiGate-1000 Specifications

Related product manuals