Fortinet FortiWiFi FortiWiFi-60 Administration Manual page 9

Monitor ............................................................................................................................ 263
Dialup monitor............................................................................................................. 264
Static IP and dynamic DNS monitor............................................................................ 264
PPTP............................................................................................................................... 265
Setting up a PPTP-based VPN ................................................................................... 265
Enabling PPTP and specifying a PPTP range ............................................................ 266
Configuring a Windows 2000 client for PPTP ............................................................. 267
Configuring a Windows XP client for PPTP ................................................................ 267
PPTP passthrough...................................................................................................... 268
L2TP .............................................................................................................................. 269
Setting up a L2TP-based VPN.................................................................................... 270
Enabling L2TP and specifying an L2TP range............................................................ 270
Configuring a Windows 2000 client for L2TP.............................................................. 271
Configuring a Windows XP client for L2TP ................................................................. 272
Certificates ...................................................................................................................... 274
Viewing the certificate list............................................................................................ 275
Generating a certificate request.................................................................................. 275
Installing a signed certificate ...................................................................................... 277
Enabling VPN access for specific certificate holders ................................................. 278
CLI configuration............................................................................................................. 279
ipsec phase1............................................................................................................... 279
ipsec phase2............................................................................................................... 281
ipsec vip ...................................................................................................................... 282
Authenticating peers with preshared keys ...................................................................... 284
Gateway-to-gateway VPN............................................................................................... 284
Dialup VPN ..................................................................................................................... 285
Dynamic DNS VPN ......................................................................................................... 285
Manual key IPSec VPN................................................................................................... 286
Adding firewall policies for IPSec VPN tunnels............................................................... 286
Setting the encryption policy direction ........................................................................ 286
Setting the source address for encrypted traffic ......................................................... 286
Setting the destination address for encrypted traffic................................................... 287
Adding an IPSec firewall encryption policy ................................................................. 287
Internet browsing through a VPN tunnel ......................................................................... 287
Configuring Internet browsing through a VPN tunnel.................................................. 288
IPSec VPN in Transparent mode.................................................................................... 289
Special rules ............................................................................................................... 289
Hub and spoke VPNs...................................................................................................... 290
Configuring the hub..................................................................................................... 290
Configuring spokes ..................................................................................................... 292
Redundant IPSec VPNs.................................................................................................. 293
Configuring redundant IPSec VPNs............................................................................ 293
Configuring IPSec virtual IP addresses .......................................................................... 294
Troubleshooting .............................................................................................................. 296
FortiWiFi-60 Administration Guide 01-28006-0014-20041105
Contents
9