IPsec VPN authenticating a remote FortiGate peer with a pre-shared key This recipe provides sample configuration of IPsec VPN authenticating a remote FortiGate peer with a pre-shared key. The following shows the sample network topology for this recipe: You can […]
OCVPN troubleshooting This document includes troubleshooting steps for the following OCVPN network topologies: Full mesh. l Hub-spoke with ADVPN shortcut. l Hub-spoke with inter-overlay source NAT. For OCVPN configurations in different network topologies, please refer to the other OCVPN topics. […]
Hub-Spoke OCVPN with inter-overlay source NAT This topic provides a sample configuration of Hub-Spoke OCVPN with inter-overlay source NAT. OCVPN isolates traffic between overlays by default. With NAT enabled on Spokes and assign-ip enabled on Hub, you can have interoverlay […]
Hub-spoke OCVPN with ADVPN shortcut This topic provides a sample configuration of a hub-spoke One-Click VPN (OCVPN) with an Auto Discovery VPN (ADVPN) shortcut. OCVPN automatically detects the network topology based on members’ information. To form a hubspoke OCVPN, at […]
Full mesh OCVPN This topic provides an example configuration of full mesh Overlay Controller VPN (OCVPN). OCVPN is a cloud based solution to simplify IPsec VPN setup. When Overlay Controller VPN is enabled, IPsec phase1interfaces, phase2-interfaces, static routes, and firewall […]
ADVPN with RIP as the routing protocol This recipe provides sample configuration of ADVPN with RIP as routing protocol. The following options must be enabled for this configuration: l On the hub FortiGate, IPsec phase1-interface net-device disable must be run. […]
ADVPN with OSPF as the routing protocol This recipe provides sample configuration of ADVPN with OSPF as the routing protocol. The following options must be enabled for this configuration: l On the hub FortiGate, IPsec phase1-interface net-device enable must be […]
ADVPN with BGP as the routing protocol This recipe provides sample configuration of ADVPN with BGP as the routing protocol. The following options must be enabled for this configuration: l On the hub FortiGate, IPsec phase1-interface net-device disable must be […]
