Table of Contents
Advertisement
Manual key IPSec VPNs
10
156
5
Enter the Remote SPI.
The Remote Security Parameter Index is a hexadecimal number of up to eight digits
(digits can be 0 to 9, a to f) in the range bb8 to FFFFFFF. This number must be added
to the Local SPI at the opposite end of the tunnel.
6
Enter the Remote Gateway.
This is the external IP address of the FortiGate unit or other IPSec gateway at the
opposite end of the tunnel.
7
Select an Encryption Algorithm from the list.
Use the same algorithm at both ends of the tunnel.
8
Enter the Encryption Key.
Each two character combination entered in hexadecimal format represents one byte.
Depending on the encryption algorithm you have selected, you may be required to
enter the key in multiple segments. Use the same encryption key at both ends of the
tunnel.
DES
Enter a 16 character (8 byte) hexadecimal number (0-9, A-F).
3DES
Enter a 48 character (24 byte) hexadecimal number (0-9, A-F). Separate the
number into three segments of 16 characters.
AES128
Enter a 32 character (16 byte) hexadecimal number (0-9, A-F). Separate the
number into two segments of 16 characters.
AES192
Enter a 48 character (24 byte) hexadecimal number (0-9, A-F). Separate the
number into three segments of 16 characters.
AES256
Enter a 64 character (32 byte) hexadecimal number (0-9, A-F). Separate the
number into four segments of 16 characters.
9
Select an Authentication Algorithm from the list.
Use the same algorithm at both ends of the tunnel.
Enter the Authentication Key.
Each two character combination entered in hexadecimal format represents one byte.
Use the same authentication key at both ends of the tunnel.
MD5
Enter a 32 character (16 byte) hexadecimal number (0-9, A-F). Separate the
number into two segments of 16 characters.
SHA1
Enter a 40 character (20 byte) hexadecimal number (0-9, A-F). Separate the
number into two segments—the first of 16 characters; the second of 24
characters.
11
Select a concentrator if you want the tunnel to be part of a hub and spoke VPN
configuration. See
Select OK to save the manual key VPN tunnel.
"Adding a VPN concentrator" on page
IPSec VPN
173.
Fortinet Inc.
Advertisement
Table of Contents
