If you need detailed steps about configuring ADSL Connection with PPPoE mode refer this article ( Configure FortiGate DDNS with ADSL Connection).Įnable FortiGuard DDNS. You will see the public ip address which has taken from the interface. Enter Username and Password details and save the configuration. ( FortiOS™ Handbook, IPsec VPN for FortiOS 5.0)Īs shown in above diagram I have FortiGate 600C unit (with a Static IP) at Head Office, FortiGate 40C (with an ADSL connection) at Site Office.Īssume you have ADSL connection at site office, so configure the WAN interface as PPPoE addressing mode. A policy-based VPN is implemented through a special security policy that applies the encryption you specified in the phase 1 and phase 2 settings. That is why route-based VPNs are also known as interface-based VPNs. A route-based VPN creates a virtual IPsec network interface that applies encryption or decryption as needed to any traffic that it carries. However there is a difference in implementation. In both cases, you specify phase 1 and phase 2 settings.

There is little difference between the two types. When the first packet of data that meets all of the conditions of the security policy arrives at the FortiGate unit, a VPN tunnel may be initiated and the encryption or decryption of data is performed automatically afterward.įortiGate unit VPNs can be policy-based or route-based. optionally, the services (types of data) that can be sent.

optionally, a schedule that restricts when the VPN can operate.IP addresses associated with data that has to be encrypted and decrypted.the FortiGate interface that connects to the private network.the FortiGate interface that provides the physical connection to the remote VPN gateway, usually an interface connected to the Internet.

There must be a security policy in place to permit traffic to pass between the private network and the VPN tunnel. VPN configurations interact with the firewall component of the FortiGate unit.

Fortigate ipsec vpn site to site