It can work in static mode (as shown in this example), DHCP, or PPPoE mode. The WAN interface is the interface connected to the ISP. The HA heartbeat interfaces are WAN1 and WAN2:Ģ) Configure the WAN interface and default route. In this example, two FortiGates work in active-passive mode. To configure IPsec VPN in an HA environment using the CLI:ġ) Configure HA. From the 'Local Interface dropdown' menu, select the desired local interface. For 'Outgoing Interface', select 'port13'.

For 'Template Type', select 'Site to Site'.

Go to VPN- > IPsec Wizard and configure the following settings for VPN Setup: From the 'Local Interface dropdown' menu, select the 'local interface'. In the 'Pre-shared Key' field, enter an example key.Ĭonfigure the following settings for Policy & Routing: For 'Authentication Method', select 'Pre-shared Key'. For 'Outgoing Interface', select 'port1'. For 'Remote Device', select 'IP Address'. For 'NAT Configuration', set 'No NAT between sites'.Ĭonfigure the following settings for Authentication: For 'Remote Device Type', select 'FortiGate'. For Template Type, select 'Site to Site'. Go to VPN -> IPsec Wizard and configure the following settings for VPN Setup:

To configure IPsec VPN in an HA environment in the GUI:ġ) Set up IPsec VPN on HQ1 (the HA cluster): In this example, the VPN name for HQ1 is 'to_HQ2', and the VPN name for HQ2 is 'to_HQ1'. Configure IPsec VPN in an HA environment using the GUI or CLI.

Ha tunnel