Using Redundant Ospf Routing Over Ipsec Vpn - Fortinet FortiGate 1U Quick Start Manual

Using redundant OSPF routing over IPsec VPN

This example sets up redundant secure communication between two remote
networks using an Open Shortest Path First (OSPF) VPN connection. In this example,
the HQ FortiGate unit will be called FortiGate 1 and the Branch FortiGate unit will be
called FortiGate 2.
1. Creating redundant IPsec tunnels on FortiGate 1
2. Configuring IP addresses and OSPF on FortiGate 1
3. Configuring firewall addresses on FortiGate 1
4. Configuring security policies on FortiGate 1
5. Creating redundant IPsec tunnels for FortiGate 2
6. Configuring IP addresses and OSPF on FortiGate 2
7. Configuring firewall addresses on FortiGate 2
8. Configuring security policies on FortiGate 2
9. Results
FortiGate 1
Internal
10.20.1.1/24
Using redundant OSPF routing over IPsec VPN
WAN 1
172.20.120.24
IPsec
IPsec
WAN 2
172.20.120.23
Internal
Network
(HQ)
OSPF
WAN 1
172.20.120.123
I
nternet
WAN 2
172.20.120.127
OSPF
Internal
Network
(Branch)
FortiGate 2
Internal
10.21.1.1/24
203