Fortinet FortiGate FortiGate-500A, Administration Manual

Page: 258 / 394

258
01-28006-0100-20041105 Fortinet Inc.
Manual key VPN
Manual key list
Figure 126:IPSec VPN Manual Key list
Manual key options
Figure 127:Adding a manual key VPN tunnel
Create New Select Create New to add a manual key configuration.
Remote Gateway The IP address of the remote gateway.
Encryption
Algorithm The names of the encryption algorithms used by each manual key
configuration.
Authentication
Algorithm The names of the authentication algorithms used by each manual key
configuration.
Edit, view, or delete manual key configurations.
VPN Tunnel
Name Type a name for the VPN tunnel.
Local SPI The local Security Parameter Index (SPI) identifies the local manual key VPN
peer. Enter a hexadecimal number (digits can be 0 to 9, a to f) in the range
bb8 to FFFFFFF. This number must be added to the Remote SPI at the
opposite end of the tunnel.
Remote SPI The remote Security Parameter Index identifies the remote manual key VPN
peer. Enter a hexadecimal number of up to eight digits in the range bb8 to
FFFFFFF. This number must be added to the Local SPI at the opposite end of
the tunnel.
Remote
Gateway Enter the external IP address of the FortiGate unit or other IPSec gateway at
the opposite end of the tunnel.
Encryption
Algorithm Select an Encryption Algorithm from the list.
Use the same algorithm at both ends of the tunnel.