Fortinet FortiGate 1U Quick Start Manual page 206

Create a remote LAN address. Set Type
to Subnet, Subnet/IP Range to the HQ
subnet, and Interface to the VPN Phase 1.
Creating an HQ security
policy and static route.
Go to Policy > Policy > Policy.
Create a policy for outbound traffic. Set
Incoming Interface to an internal port,
Source Address to the local address,
Outgoing Interface to the VPN Phase 1,
and Destination Address to the remote
LAN address.
Create a second policy for inbound traffic.
Set Incoming Interface to the VPN
phase 1, Source Address to the local
address, Outgoing Interface to an internal
port, and Destination Address to the local
address.
186 The FortiGate Cookbook 5.0.