VPN
Dialup VPN
FortiGate-60 Administration Guide
01-28006-0002-20041105
279
Dialup VPN
Dialup VPN allows remote users with dynamic IP addresses to use VPN to connect to
a private network. Dialup VPNs use AutoIKE and can be preshared key or certificate
VPNs.
To configure dialup VPN
1
Add a phase 1 configuration to define the parameters used to authenticate the remote
VPN peer.
2
Set Remote Gateway to Dialup user.
3
Set other phase 1 options as required.
See
“Phase 1” on page 246
.
4
Add the phase 2 configuration to define the parameters used to create and maintain
the AutoKey VPN tunnel.
See
“Phase 2” on page 250
.
5
Add the firewall configuration required for the VPN.
See
“Adding firewall policies for IPSec VPN tunnels” on page 280
.
6
Configure remote VPN clients with a matching IPSec VPN configuration.
Dynamic DNS VPN
Dynamic DNS VPN allows remote users or gateways with dynamic IP addresses to
use VPN to connect to a private network. In this case, the gateway or client at the
remote end of the VPN tunnel has a dynamic IP address, but the FortiGate unit can
get the IP address by looking up a domain name. The remote client or gateway uses
dynamic DNS to re-map this domain name to its IP address whenever the IP address
changes.
Dynamic DNS VPNs use AutoIKE and can be preshared key or certificate VPNs.
To configure dynamic DNS VPN
1
Add a phase 1 configuration to define the parameters used to authenticate the remote
VPN peer.
2
Set Remote Gateway to Dynamic DNS.
3
Enter the dynamic DNS domain name of the remote peer.
4
Set other phase 1 options as required.
See
“Phase 1” on page 246
.
5
Add the phase 2 configuration to define the parameters used to create and maintain
the AutoKey VPN tunnel.
See
“Phase 2” on page 250
.
6
Add the firewall configuration required for the VPN.
See
“Adding firewall policies for IPSec VPN tunnels” on page 280
.
Summary of Contents for FortiGate-60 series
Page 42: ...42 01 28006 0002 20041105 Fortinet Inc Changing the FortiGate firmware System status ...
Page 80: ...80 01 28006 0002 20041105 Fortinet Inc Dynamic IP System DHCP ...
Page 114: ...114 01 28006 0002 20041105 Fortinet Inc Access profiles System administration ...
Page 232: ...232 01 28006 0002 20041105 Fortinet Inc Protection profile Firewall ...
Page 244: ...244 01 28006 0002 20041105 Fortinet Inc CLI configuration Users and authentication ...
Page 320: ...320 01 28006 0002 20041105 Fortinet Inc CLI configuration Antivirus ...
Page 380: ...380 01 28006 0002 20041105 Fortinet Inc Glossary ...
Page 388: ...388 01 28006 0002 20041105 Fortinet Inc Index ...