Fortinet FortiGate FortiGate-50 - Page 8

Contents
8 Fortinet Inc.
IPSec VPN........................................................................................................... 153
Key management............................................................................................................ 154
Manual Keys ............................................................................................................... 154
Automatic Internet Key Exchange (AutoIKE) with pre-shared keys or certificates ..... 154
Manual key IPSec VPNs................................................................................................. 155
General configuration steps for a manual key VPN .................................................... 155
Adding a manual key VPN tunnel ............................................................................... 155
AutoIKE IPSec VPNs...................................................................................................... 157
General configuration steps for an AutoIKE VPN ....................................................... 157
Adding a phase 1 configuration for an AutoIKE VPN.................................................. 157
Adding a phase 2 configuration for an AutoIKE VPN.................................................. 161
Managing digital certificates............................................................................................ 163
Obtaining a signed local certificate ............................................................................. 163
Obtaining a CA certificate ........................................................................................... 167
Configuring encrypt policies............................................................................................ 168
Adding a source address ............................................................................................ 169
Adding a destination address...................................................................................... 169
Adding an encrypt policy............................................................................................. 169
IPSec VPN concentrators ............................................................................................... 171
VPN concentrator (hub) general configuration steps .................................................. 171
Adding a VPN concentrator ........................................................................................ 173
VPN spoke general configuration steps...................................................................... 174
Redundant IPSec VPNs.................................................................................................. 175
Configuring redundant IPSec VPN ............................................................................. 175
Monitoring and Troubleshooting VPNs ........................................................................... 177
Viewing VPN tunnel status.......................................................................................... 177
Viewing dialup VPN connection status ....................................................................... 177
Testing a VPN............................................................................................................. 178
PPTP and L2TP VPN .......................................................................................... 179
Configuring PPTP ........................................................................................................... 179
Configuring the FortiGate unit as a PPTP gateway .................................................... 180
Configuring a Windows 98 client for PPTP ................................................................. 182
Configuring a Windows 2000 client for PPTP ............................................................. 183
Configuring a Windows XP client for PPTP ................................................................ 184
Configuring L2TP............................................................................................................ 185
Configuring the FortiGate unit as a L2TP gateway ..................................................... 186
Configuring a Windows 2000 client for L2TP.............................................................. 189
Configuring a Windows XP client for L2TP ................................................................. 190