Fortinet FortiGate FortiGate-60R Installation And Configuration Manual page 9

Manual key IPSec VPNs................................................................................................. 181
General configuration steps for a manual key VPN .................................................... 181
Adding a manual key VPN tunnel ............................................................................... 181
AutoIKE IPSec VPNs ...................................................................................................... 183
General configuration steps for an AutoIKE VPN ....................................................... 183
Adding a phase 1 configuration for an AutoIKE VPN.................................................. 183
Adding a phase 2 configuration for an AutoIKE VPN.................................................. 187
Managing digital certificates............................................................................................ 189
Obtaining a signed local certificate ............................................................................. 189
Obtaining a CA certificate ........................................................................................... 193
Configuring encrypt policies............................................................................................ 194
Adding a source address ............................................................................................ 195
Adding a destination address...................................................................................... 195
Adding an encrypt policy............................................................................................. 195
IPSec VPN concentrators ............................................................................................... 197
VPN concentrator (hub) general configuration steps .................................................. 197
Adding a VPN concentrator ........................................................................................ 199
VPN spoke general configuration steps...................................................................... 200
Redundant IPSec VPNs.................................................................................................. 201
Configuring redundant IPSec VPN ............................................................................. 201
Monitoring and Troubleshooting VPNs ........................................................................... 203
Viewing VPN tunnel status.......................................................................................... 203
Viewing dialup VPN connection status ....................................................................... 203
Testing a VPN............................................................................................................. 204
PPTP and L2TP VPN .......................................................................................... 205
Configuring PPTP ........................................................................................................... 205
Configuring the FortiGate unit as a PPTP gateway .................................................... 206
Configuring a Windows 98 client for PPTP ................................................................. 208
Configuring a Windows 2000 client for PPTP ............................................................. 209
Configuring a Windows XP client for PPTP ................................................................ 210
Configuring L2TP ............................................................................................................ 211
Configuring the FortiGate unit as a L2TP gateway ..................................................... 212
Configuring a Windows 2000 client for L2TP.............................................................. 215
Configuring a Windows XP client for L2TP ................................................................. 216
FortiGate-60R Installation and Configuration Guide
Contents
9