vpn ipsec forticlient

Configure automatic VPN connection for FortiClient users. FortiClient users who wish to use automatic VPN configuration must be members of a user group. The command below creates a realm that associates the user group with phase 2 VPN configurations.

config vpn ipsec forticlient
    edit {realm}
    # Configure FortiClient policy realm.
        set realm {string}   FortiClient realm name. size[35]
        set usergroupname {string}   User group name for FortiClient users. size[35] - datasource(s): user.group.name
        set phase2name {string}   Phase 2 tunnel name that you defined in the FortiClient dialup configuration. size[35] - datasource(s): vpn.ipsec.phase2.name,vpn.ipsec.phase2-interface.name
        set status {enable | disable}   Enable/disable this FortiClient configuration.
    next
end

usergroupname <name>

Enter the name of a pre-existing user group created for dialup clients.

phase2name <name>

Enter the name of the pre-existing phase 2 tunnel configuration defined for the dialup-client configuration.

status {enable | disable}

Enable (by default) or disable IPsec VPN policy distribution.