Phase 2 List; Phase 2 Basic Settings - Fortinet FortiGate FortiGate-5001 Administration Manual

VPN

Phase 2 list

Phase 2 basic settings

FortiGate-5000 series Administration Guide
Figure 129:IPSec VPN Phase 2 list
Create New Select Create New to create a new phase 2 tunnel configuration.
Tunnel Name The names of existing tunnel configurations.
Remote Gateway The names of the phase 1 configurations that are associated with the
tunnel configurations.
Lifetime (sec/kb) The tunnel key lifetime.
Status The current status of the tunnel. If Down, the tunnel is not processing
traffic. If Up, the tunnel is currently processing traffic. Unknown is
displayed for dialup tunnels.
Timeout If the tunnel is processing VPN traffic, the Timeout value specifies
amount of time left before the next phase 2 key exchange. When the
phase 2 key expires, a new key is generated without interrupting service.
Delete and Edit Delete or edit a phase 2 configuration.
icons
Figure 130:Phase 2 basic settings
Tunnel Name Type a name to identify the tunnel configuration.
Remote Select the phase 1 configuration to assign to this tunnel. See
page 256. The phase 1 configuration describes how remote peers or clients
Gateway
will be authenticated on this tunnel, and how the connection to the remote
peer or client will be secured.
Concentrator If the tunnel will be included in a hub-and-spoke configuration, you may select
the concentrator from the list. The hub must be added to the FortiGate
configuration before it can be selected here. See
01-28008-0013-20050204
Phase 2
"Phase 1" on
"Concentrator" on page 266.
261