Fortinet FortiGate 50A Installation And Configuration Manual page 189

IPSec VPN
10
12
13
FortiGate-50A Installation and Configuration Guide
Enable Autokey Keep Alive if you want to keep the VPN tunnel running even if no data
is being processed.
11 Select a concentrator if you want the tunnel to be part of a hub and spoke VPN
configuration.
If you use the procedure,
to a concentrator, the next time you open the tunnel, the Concentrator field displays
the name of the concentrator to which you added the tunnel.
Select a Quick Mode Identity.
Use selectors from policy
Use wildcard selectors
Select OK to save the AutoIKE key VPN tunnel.
Figure 23: Adding a phase 2 configuration
"Adding a VPN concentrator" on page 198
Select this option for policy-based VPNs. A policy-based
VPN uses an encrypt policy to select which VPN tunnel to
use for the connection. In this configuration, the VPN tunnel
is referenced directly from the encrypt policy.
You must select this option if both VPN peers are FortiGate
units.
Select this option for routing-based VPNs. A routing-based
VPN uses routing information to select which VPN tunnel to
use for the connection. In this configuration, the tunnel is
referenced indirectly by a route that points to a tunnel
interface.
You must select this option if the remote VPN peer is a non-
FortiGate unit that has been configured to operate in tunnel
interface mode.
AutoIKE IPSec VPNs
to add the tunnel
189