Fortinet FortiGate 1U Quick Start Manual page 203

Create a remote LAN address. Set Type to
Subnet, Subnet/IP Range to the Branch
subnet, and Interface to the VPN Phase 1.
Creating an HQ security
policy and static route.
Go to Policy > Policy > Policy.
Create a policy for outbound traffic. Set
Incoming Interface to an internal port,
Source Address to the local address,
Outgoing Interface to the VPN Phase 1,
and Destination Address to the remote
LAN address.
Create a second policy for inbound traffic.
Set Incoming Interface to the VPN phase
1, Source Address to the local address,
Outgoing Interface to an internal port, and
Destination Address to the local address.
Using IPsec VPN to provide communication between offices 183