Table of Contents
Advertisement
Results
Go to VPN > Monitor > IPsec Monitor to
verify the statuses of both the primary and
secondary IPsec VPN tunnels on FortiGate 1
and FortiGate 2.
Go to Router > Monitor > Routing.
Monitor to verify the routing table on
FortiGate 1 and FortiGate 2. Type OSPF for
the Type and select Apply Filter to verify
the OSPF route.
Verify that traffic flows via the primary tunnel.
From a PC1 set to IP:10.20.1.100 behind
FortiGate 1, run a tracert to a PC2 set to IP
address 10.21.1.00 behind FortiGate 2 and
vise versa.
From PC1, you should see that the traffic
goes through 10.1.1.2 which is the primary
tunnel interface IP set on FortiGate 2.
From PC2, you should see the traffic goes
through 10.1.1.1 which is the primary tunnel
interface IP set on FortiGate 1.
The VPN network between the two OSPF
networks uses the primary VPN connection.
Disconnect the wan1 interface and
216
The FortiGate Cookbook 5.0.
Advertisement
Table of Contents
