Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Products Best Practices Hardware Guides Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
    • More >>
    Unified SASE
  • Single Vendor SASE
  • Cloud Network Security
  • Secure Endpoint Connectivity
  • Web Application / API Protection
    • More >>
    Security Operations
  • Security Operations Automation
  • Identity
  • Early Detection & Prevention
    • More >>
    Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
  • Communication & Surveillance
    • Unified SASE
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Cloud Network Security
  • Cloud-Native Security
  • Web Application / API Protection
    • Security Operations
  • Security Operations Automation
  • Endpoint
  • Data Protection
  • Identity
  • Email
  • Early Detection & Prevention
  • Expert Services
  • Edge Firewall
  • Orchestration & management
  • SD Branch
  • Application Delivery
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Secure Private Access
  • Thin Edge
  • Identity
  • Application Gateway
  • Enterprise Asset Management
  • Endpoint Agent
  • Agentless Security Posture
  • Identity
  • Wireless
  • Switching
  • Identity
  • Privilege Acccess Management
  • Next Generation Firewall
  • Orchestration & management
  • Expert Services
  • All
  • All
  • Account Management
  • SAAS Management
  • SAAS Application Security
  • Managed Services
  • Platform as a service (PAAS)
  • Other SAAS Services
    • 4D Resources
    Solution Hubs
  • 4D Pillars
  • Cloud
  • Popular Solutions

    • Handbook

    Home FortiADC 7.0.5 Handbook
    7.0.5
    7.4.5
    7.4.4
    7.4.3
    7.4.2
    7.4.1
    7.4.0
    7.2.7
    7.2.6
    7.2.5
    7.2.4
    7.2.3
    7.2.2
    7.2.1
    7.2.0
    7.1.4
    7.1.3
    7.1.2
    7.1.1
    7.1.0
    7.0.5
    7.0.4
    7.0.3
    7.0.2
    7.0.1
    7.0.0
    6.2.6
    6.2.5
    6.2.4
    6.2.3
    6.2.2
    6.2.1
    6.2.0
    6.1.6
    6.1.5
    6.1.4
    6.1.3
    6.1.2
    6.1.1
    6.1.0
    6.0.1
    6.0.0
    5.4.3
    5.4.2
    5.4.1
    5.4.0
    5.3.6
    5.3.5
    5.3.4
    5.3.3
    5.3.2
    5.3.1
    5.3.0
    5.2.7

    Configuring a virtual tunnel group

    Configuring a virtual tunnel group

    Virtual tunnels enable reliable, site-to-site connectivity using Generic Routing Encapsulation (GRE) to tunnel traffic between pairs of FortiADC appliances. See Using virtual tunnels.

    The virtual tunnel group configuration sets the list of tunnel members, as well as load balancing options like algorithm and weight.

    When you add members to a virtual tunnel configuration, you specify a local and remote IP address. These addresses are IP addresses assigned to a network interface on the local and remote FortiADC appliance.

    Before you begin:

    • You must have Read-Write permission for Link Load Balance settings.

    After you have configured a virtual tunnel configuration object, you can select it in the link policy configuration.

    To configure a virtual tunnel:
    1. Go to Link Load Balance > Virtual Tunnel.
    2. Click Create New to display the configuration editor.
    3. Complete the configuration and add members as described in Virtual tunnel configuration.
    4. Save the configuration.

    Virtual tunnel configuration
    Settings Guidelines

    Name

    Configuration name. Valid characters are A-Z, a-z, 0-9, _, and -. No spaces. You reference this name in the LLB policy configuration.

    Note: After you initially save the configuration, you cannot edit the name.

    Method
    • Weighted Round Robin—Dispatches packets to VT members using a weighted round-robin method.
    • Source-Destination Hash—Dispatches packets by source-destination IP address tuple.

    Add member

    Name

    Configuration name. Valid characters are A-Z, a-z, 0-9, _, and -. No spaces.

    After you initially save the configuration, you cannot edit the name.

    Tunnel Local Address

    IP address for the network interface this system uses to form a VPN tunnel with the remote system.

    Tunnel Remote Address

    IP address that the remote FortiADC system uses to form a VPN tunnel with this system.

    Health Check
    • Enable—Send probes to test whether the link is available.
    • Disable—Do not send probes to test the health of the link.

    Weight

    Assigns relative preference among members—higher values are more preferred and are assigned connections more frequently.

    Status
    • Enable—The member is considered available for new traffic.
    • Disable—The member is considered unavailable for new traffic.

    Backup

    Enable to designate the tunnel as a backup member of the group. All backup members are inactive until all main members are down.
    Previous
    Next

    Configuring a virtual tunnel group

    Configuring a virtual tunnel group

    Virtual tunnels enable reliable, site-to-site connectivity using Generic Routing Encapsulation (GRE) to tunnel traffic between pairs of FortiADC appliances. See Using virtual tunnels.

    The virtual tunnel group configuration sets the list of tunnel members, as well as load balancing options like algorithm and weight.

    When you add members to a virtual tunnel configuration, you specify a local and remote IP address. These addresses are IP addresses assigned to a network interface on the local and remote FortiADC appliance.

    Before you begin:

    • You must have Read-Write permission for Link Load Balance settings.

    After you have configured a virtual tunnel configuration object, you can select it in the link policy configuration.

    To configure a virtual tunnel:
    1. Go to Link Load Balance > Virtual Tunnel.
    2. Click Create New to display the configuration editor.
    3. Complete the configuration and add members as described in Virtual tunnel configuration.
    4. Save the configuration.

    Virtual tunnel configuration
    Settings Guidelines

    Name

    Configuration name. Valid characters are A-Z, a-z, 0-9, _, and -. No spaces. You reference this name in the LLB policy configuration.

    Note: After you initially save the configuration, you cannot edit the name.

    Method
    • Weighted Round Robin—Dispatches packets to VT members using a weighted round-robin method.
    • Source-Destination Hash—Dispatches packets by source-destination IP address tuple.

    Add member

    Name

    Configuration name. Valid characters are A-Z, a-z, 0-9, _, and -. No spaces.

    After you initially save the configuration, you cannot edit the name.

    Tunnel Local Address

    IP address for the network interface this system uses to form a VPN tunnel with the remote system.

    Tunnel Remote Address

    IP address that the remote FortiADC system uses to form a VPN tunnel with this system.

    Health Check
    • Enable—Send probes to test whether the link is available.
    • Disable—Do not send probes to test the health of the link.

    Weight

    Assigns relative preference among members—higher values are more preferred and are assigned connections more frequently.

    Status
    • Enable—The member is considered available for new traffic.
    • Disable—The member is considered unavailable for new traffic.

    Backup

    Enable to designate the tunnel as a backup member of the group. All backup members are inactive until all main members are down.
    Previous
    Next