Fortinet FortiGate FortiGate-3000 Administration Guide

Contents
12 01-28006-0010-20041105 Fortinet Inc.
VPN........................................................................................................................ 11
Phase 1............................................................................................................................. 12
Phase 1 list ................................................................................................................... 12
Phase 1 basic settings .................................................................................................. 12
Phase 1 advanced options............................................................................................ 14
Configuring XAuth......................................................................................................... 15
Phase 2............................................................................................................................. 16
Phase 2 list ................................................................................................................... 17
Phase 2 basic settings .................................................................................................. 17
Phase 2 advanced options............................................................................................ 17
Manual key........................................................................................................................ 19
Manual key list .............................................................................................................. 19
Manual key options ....................................................................................................... 20
Concentrator ..................................................................................................................... 20
Concentrator list............................................................................................................ 21
Concentrator options..................................................................................................... 21
Ping Generator.................................................................................................................. 21
Ping generator options.................................................................................................. 22
Monitor.............................................................................................................................. 22
Dialup monitor............................................................................................................... 22
Static IP and dynamic DNS monitor.............................................................................. 23
PPTP................................................................................................................................. 23
Setting up a PPTP-based VPN ..................................................................................... 24
Enabling PPTP and specifying a PPTP range .............................................................. 24
Configuring a Windows 2000 client for PPTP ............................................................... 25
To configure a PPTP dialup connection..................................................................... 25
To connect to the PPTP VPN..................................................................................... 25
Configuring a Windows XP client for PPTP .................................................................. 25
To configure a PPTP dialup connection..................................................................... 25
To configure the VPN connection .............................................................................. 26
To connect to the PPTP VPN..................................................................................... 26
PPTP passthrough........................................................................................................ 26
To configure a dynamic port forwarding virtual IP for port 1723 ................................ 27
To configure the firewall policy................................................................................... 27
L2TP ................................................................................................................................ 28
Setting up a L2TP-based VPN...................................................................................... 28
Enabling L2TP and specifying an L2TP range.............................................................. 29
Configuring a Windows 2000 client for L2TP................................................................ 29
To configure an L2TP dialup connection.................................................................... 29
To disable IPSec........................................................................................................ 30
To connect to the L2TP VPN ..................................................................................... 30
Configuring a Windows XP client for L2TP ................................................................... 30
To configure an L2TP VPN dialup connection ........................................................... 30

Fortinet FortiGate FortiGate-3000 Specifications

General

Brand	Fortinet
Model	FortiGate FortiGate-3000
Category	Firewall
Language	English