Configuring VPNs without FortiClient Endpoint Security
Using the FortiClient VPN Editor
FortiClient Endpoint Security Version 4.0 MR1 Administration Guide
04-40001-99556-20090626
49
http://docs.fortinet.com/
•
Feedback
2
Select
New
.
3
Enter the following information:
4
Select
Advanced
if you need to:
• modify IKE or IPSec settings (see “Configuring IKE and IPSec policies” in the
FortiClient Endpoint Security User Guide
)
• configure the FortiClient VPN to use a virtual IP address
• add the IP addresses of additional networks behind the remote gateway
• configure Internet browsing over IPSec
• configure extended authentication (XAUTH)
The
Advanced Settings
window opens. This is the starting point for the rest of the
procedures in this section.
To configure the virtual IP address
In the
Advanced Settings
window, do the following:
1
Select
Acquire virtual IP address
and then select
Config
.
2
In the
Virtual IP Acquisition
window, do one of the following:
• Select
Dynamic Host Configuration Protocol (DHCP) over IPSec.
• Select
Manually Set
and enter the
IP
address,
Subnet Mask
,
DNS Server
and
WINS
Server
addresses as required.
3
Select
OK
.
To add additional remote networks to a connection
In the
Advanced Settings
window, do the following:
1
In the
Remote Network
section, select
Add
.
2
In the
Network Editor
window, enter the
IP Address
and
Subnet mask
of the remote
network and then select
OK
.
3
Repeat Steps
1
and
2
for each additional network that you want to add.
You can specify up to 16 remote networks.
4
Select
OK
.
To enable Internet browsing over IPSec
In the
Advanced Settings
window, do the following:
1
In the
Remote Network
section, select
Add
.
Connection Name
Enter a descriptive name for the connection.
Configuration
Select
Manual
Remote Gateway
Enter the IP address or the fully qualified domain name (FQDN) of
the remote gateway.
Remote Network
Enter the IP address and netmask of the network behind the
FortiGate unit.
Authentication Method
Select
Pre-shared Key
or
X509 Certificate
.
Pre-shared Key
Enter the pre-shared key. This is available if
Authentication
Method
is
Pre-shared Key
.
X509 Certificate
Select the X509 Certificate. The certificate must already be
configured. This field is available if
Authentication Method
is
X509 Certificate
.
