Configuring Ipsec Virtual Ip Addresses - Fortinet FortiGate FortiGate-1000A Administration Manual

CLI configuration
290
get vpn ipsec vip [<vip_integer>]
show vpn ipsec vip [<vip_integer>]
ipsec vip command keywords and variables
Keywords and variables
ip <address_ipv4>
out-interface
<interface-name_str>
Example
The following commands add IPSec VIP entries for two remote hosts that can be
accessed by a FortiGate unit through an IPSec VPN tunnel on the external
interface of the FortiGate unit. Similar commands must be entered on the FortiGate
unit at the other end of the IPSec VPN tunnel.
config vpn ipsec vip
edit 1
set ip 192.168.12.1
set out-interface external
next
edit 2
set ip 192.168.12.2
set out-interface external
end
Note: Typing next lets you define another VIP address without leaving the vip shell.
This example shows how to display the settings for the vpn ipsec vip command.
get vpn ipsec vip
This example shows how to display the settings for the VIP entry named 1.
get vpn ipsec vip 1
This example shows how to display the current configuration of all existing VIP
entries.
show vpn ipsec vip

Configuring IPSec virtual IP addresses

Use the FortiGate unit's IPSec VIP feature to enable hosts on physically different
networks to communicate with each other as if they were connected to the same
private network. This feature can be configured manually through CLI commands.
When the destination IP address in a local ARP request matches an entry in the
FortiGate unit's virtual IP (VIP) table, the FortiGate unit responds with its own MAC
address and forwards traffic to the correct destination at the other end of the VPN
tunnel afterward.
01-28011-0254-20051115
Description
The IP address of the destination
host on the destination network.
The name of the FortiGate interface
to the destination network.
VPN
Default Availability
0.0.0.0 All models.
null All models.
Fortinet Inc.