Fortinet black logo

CLI Reference

Home FortiGate / FortiOS 6.0.0 CLI Reference

vpn ipsec concentrator

6.0.0
7.4.3
7.4.2
7.4.1
7.4.0
7.2.8
7.2.7
7.2.6
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.0.15
7.0.14
7.0.13
7.0.12
7.0.11
7.0.10
7.0.9
7.0.8
7.0.7
7.0.6
7.0.5
7.0.4
7.0.3
7.0.2
7.0.1
7.0.0
6.4.15
6.4.14
6.4.13
6.4.12
6.4.11
6.4.10
6.4.9
6.4.8
6.4.7
6.4.6
6.4.5
6.4.4
6.4.3
6.4.2
6.4.1
6.4.0
6.2.16
6.2.15
6.2.14
6.2.13
6.2.12
6.2.11
6.2.10
6.2.9
6.2.8
6.2.7
6.2.6
6.2.5
6.2.4
6.2.3
6.2.2
6.2.1
6.0.0
5.6.0
5.4.0
5.2.0
5.0.0
Copy Link
Copy Doc ID c287b6bf-a995-11e9-81a4-00505692583a:490360
Download PDF

vpn ipsec concentrator

In a hub-and-spoke network, policy-based VPN connections to a number of remote peers radiate from a single, central FortiGate unit, or "hub". The hub functions as a concentrator on the network, managing all VPN connections between the peers, or "spokes". VPN traffic passes from one tunnel to the other through the hub. Add IPsec policy-based VPN tunnels to a VPN concentrator, allowing VPN traffic to pass from one tunnel to the other through the FortiGate unit.

Note: VPN concentrators are only available in NAT mode.

config vpn ipsec concentrator
    edit {name}
    # Concentrator configuration.
        set name {string}   Concentrator name. size[35]
        set src-check {disable | enable}   Enable to check source address of phase 2 selector. Disable to check only the destination selector.
        config member
            edit {name}
            # Names of up to 3 VPN tunnels to add to the concentrator.
                set name {string}   Member name. size[64] - datasource(s): vpn.ipsec.manualkey.name,vpn.ipsec.phase1.name
            next
    next
end

src-check {enable | disable}

Enable to check the source address of the phase 2 selector when locating the best matching phase 2 in a concentrator. Disable (by default) to check only the destination selector.

member <name> [name] [name]

Enter the names of up to three VPN tunnels to add to the concentrator, each separated by a space. Members can be tunnels defined in vpn ipsec phase1 or vpn ipsec manualkey.

Previous
Next

vpn ipsec concentrator

In a hub-and-spoke network, policy-based VPN connections to a number of remote peers radiate from a single, central FortiGate unit, or "hub". The hub functions as a concentrator on the network, managing all VPN connections between the peers, or "spokes". VPN traffic passes from one tunnel to the other through the hub. Add IPsec policy-based VPN tunnels to a VPN concentrator, allowing VPN traffic to pass from one tunnel to the other through the FortiGate unit.

Note: VPN concentrators are only available in NAT mode.

config vpn ipsec concentrator
    edit {name}
    # Concentrator configuration.
        set name {string}   Concentrator name. size[35]
        set src-check {disable | enable}   Enable to check source address of phase 2 selector. Disable to check only the destination selector.
        config member
            edit {name}
            # Names of up to 3 VPN tunnels to add to the concentrator.
                set name {string}   Member name. size[64] - datasource(s): vpn.ipsec.manualkey.name,vpn.ipsec.phase1.name
            next
    next
end

src-check {enable | disable}

Enable to check the source address of the phase 2 selector when locating the best matching phase 2 in a concentrator. Disable (by default) to check only the destination selector.

member <name> [name] [name]

Enter the names of up to three VPN tunnels to add to the concentrator, each separated by a space. Members can be tunnels defined in vpn ipsec phase1 or vpn ipsec manualkey.

Previous
Next