Fortinet FortiGate-800 User Manual

Page 241

IPSec VPN

AutoIKE IPSec VPNs

FortiGate-800 Installation and Configuration Guide

241

Enable Autokey Keep Alive if you want to keep the VPN tunnel running even if no data
is being processed.

Select a concentrator if you want the tunnel to be part of a hub and spoke VPN
configuration.
If you use the procedure,

to add the tunnel

to a concentrator, the next time you open the tunnel, the Concentrator field displays
the name of the concentrator to which you added the tunnel.

Select a Quick Mode Identity.

Select OK to save the AutoIKE key VPN tunnel.

Figure 58: Adding a phase 2 configuration

Use selectors from policy

Select this option for policy-based VPNs. A policy-based

VPN uses an encrypt policy to select which VPN tunnel to

use for the connection. In this configuration, the VPN tunnel

is referenced directly from the encrypt policy.
You must select this option if both VPN peers are FortiGate

units.

Use wildcard selectors

Select this option for routing-based VPNs. A routing-based

VPN uses routing information to select which VPN tunnel to

use for the connection. In this configuration, the tunnel is

referenced indirectly by a route that points to a tunnel

interface.
You must select this option if the remote VPN peer is a non-

FortiGate unit that has been configured to operate in tunnel

interface mode.