Fortinet FortiGate FortiGate-5020, Administration Manual

Page: 266 / 402

266
01-28008-0013-20050204 Fortinet Inc.
Concentrator VPN
Concentrator
In a hub-and-spoke configuration, connections to a number of remote peers radiate
from a single, central FortiGate unit. Site-to-site connections between the remote
peers do not exist; however, VPN tunnels between any two of the remote peers can
be established through the FortiGate unit “hub”.
In a hub-and-spoke network, all VPN tunnels terminate at the hub. The peers that
connect to the hub are known as “spokes”. The hub functions as a concentrator on the
network, managing all VPN connections between the spokes. VPN traffic passes from
one tunnel to the other through the hub.
You define a concentrator to include spokes in the hub-and-spoke configuration.
To define a concentrator
1 Go to VPN > IPSEC > Concentrator .
2 Follow the guidelines in these sections:
•
“Concentrator list” on page 266
• “Concentrator options” on page 267
Concentrator list
Figure 134:IPSec VPN concentrator list
Authentication Key If you selected:
• MD5, type a 32-character hexadecimal number (0-9, a-f) separated
into two segments of 16 characters.
• SHA1, type 40-character hexadecimal number (0-9, a-f) separated
into one segment of 16 characters and a second segment of 24
characters.
Concentrator If the tunnel will be included in a hub-and-spoke configuration, you may
select the concentrator from the list. The hub must be added to the
FortiGate configuration before it can be selected here. See
“Concentrator” on page 266 .
Create New Select Create New to define a new concentrator for an IPSec hub-and-
spoke configuration.
Concentrator Name The names of existing IPSec VPN concentrators.
Members The tunnels that are associated with the concentrator.
Delete and Edit
icons Delete or edit a concentrator configuration.