Fortinet FortiGate FortiGate-200A Administration Manual page 279

VPN
FortiGate-200A Administration Guide
config vpn ipsec vip
edit <vip_integer>
unset <keyword>
end
config vpn ipsec vip
delete <vip_integer>
end
get vpn ipsec vip [<vip_integer>]
show vpn ipsec vip [<vip_integer>]
ipsec vip command keywords and variables
Keywords and variables
ip <address_ipv4>
out-interface
<interface-name_str>
Example
The following commands add IPSec VIP entries for two remote hosts that can be
accessed by a FortiGate unit through an IPSec VPN tunnel on the external
interface of the FortiGate unit. Similar commands must be entered on the FortiGate
unit at the other end of the IPSec VPN tunnel.
config vpn ipsec vip
edit 1
set ip 192.168.12.1
set out-interface external
next
edit 2
set ip 192.168.12.2
set out-interface external
end
Note: Typing next lets you define another VIP address without leaving the vip shell.
This example shows how to display the settings for the vpn ipsec vip command.
get vpn ipsec vip
This example shows how to display the settings for the VIP entry named 1.
get vpn ipsec vip 1
This example shows how to display the current configuration of all existing VIP
entries.
show vpn ipsec vip
01-28006-0072-20041105
Description
The IP address of the destination
host on the destination network.
The name of the FortiGate interface
to the destination network.
CLI configuration
Default Availability
0.0.0.0 All models.
All models.
null
279