Fortinet Document Library
Customizing the HQ tunnel
- In the IPsec Tunnels list, highlight the new tunnel and select Edit.

- In the Edit VPN Tunnel dialog, click Convert to Custom Tunnel.

- Edit the Authentication section and enable IKE Version 2.

- Edit the Phase 1 Proposal section.
- Deselect Diffie-Hellman groups 5 and 14 and select groups 28, 29, and 30.

- Edit the Phase 2 Selectors section (don’t click the Add Button) and click Advanced….
- Deselect Diffie-Hellman groups 5 and 14 and select groups 28, 29, and 30.
- Click OK.
