Step 2: Name the tunnel, statically assign the IP Address of the remote gateway, and set the Local Interface to wan1. Step 1: In the FortiOS GUI, navigate to VPN >IPsec > Auto Key (IKE) and select Create Phase 1. Step 9: Create Policy. Navigate to Policies > Security and click Add.Ĭonfigure the multiple tabs here like General, Source, Destination and Action You can also add the proxy ID with the Local and Remote Network address Navigate to Network> IPSec Tunnels and press Add. Navigate to Network> IKE Gateways and click Add. Navigate to Network > IPSec Crypto and click Add.

Step 5: Create IKE Crypto Phrase 1 for the VPN connection. To create Navigate to Network > Virtual Routers> click ADD

Provide the details like interface Name, Virtual Router, Security Zone and save. Step 3: Now as you created the object, we need to create the interface tunnel. To create Navigate to Network> Interface> Tunnel. Provide the details like Name, Type and save Step 2: For Palo Alto and Fortinet devices with two LAN layers, we will generate the Address Object. To create Object, Navigate Object> Addresses Provide the details like Name, Log Setting, Type and save. Step 1: To create Zones, Navigate to Network > Zones We are configuring the tunnel between each site, avoiding overlapping subnets, so that a secure tunnel may be formed with the required security profiles applied.įor the VPN connections, we must build zones. We are going to talk about the IPsec VPN tunnel between Palo Alto Firewall and Fortinet firewall where one site is protected by a FortiGate, while another is protected by a Palo Alto Firewall.

Fortigate debug ipsec