Ipsec Phase2 - Fortinet FortiGate FortiGate-60M Administration Manual

VPN

ipsec phase2

FortiGate-60M Administration Guide
Use the config vpn ipsec phase2 CLI command to add or edit an IPSec VPN
phase 2 configuration.
Command syntax pattern
config vpn ipsec phase2
edit <name_str>
set <keyword> <variable>
end
config vpn ipsec phase2
edit <name_str>
unset <keyword>
end
config vpn ipsec phase2
delete <name_str>
end
get vpn ipsec phase2 [<name_str>]
show vpn ipsec phase2 [<name_str>]
ipsec phase2 command keywords and variables
Keywords and variables
bindtoif
<interface-name_str>
dstaddr <name_str>
dstport
<port_integer>
protocol
<protocol_integer>
01-28007-0144-20041217
Description
Bind the tunnel to the specified
network interface. Type the name of
the local FortiGate interface.
Enter the name of the firewall
destination IP address that
recipient or
corresponds to the
network behind the remote VPN
peer.
You must create the firewall
address before you can select it here.
For more information, see
firewall policies for IPSec VPN
tunnels" on page 268.
Enter the port number that the remote
VPN peer uses to transport traffic
related to the specified service (see
protocol). The dstport range is 1
to 65535. To specify all ports, type 0.
Enter the IP protocol number for the
service. The protocol range is 1 to
255. To specify all services, type 0.
CLI configuration
Default
No
default.
No
default.
"Adding
No
default.
No
default.
Availability
All models.
All models.
selector
must be set
to
specify.
All models.
selector
must be set
to
specify.
All models.
selector
must be set
to
specify.
273