wanopt auth-group

Use this command to configure WAN optimization authentication groups, which can be used to support secure tunneling between WAN optimization peers.

config wanopt auth-group
    edit {name}
    # Configure WAN optimization authentication groups.
        set name {string}   Auth-group name. size[35]
        set auth-method {cert | psk}   Select certificate or pre-shared key authentication for this authentication group.
                cert  Certificate authentication.
                psk   Pre-shared secret key authentication.
        set psk {password_string}   Pre-shared key used by the peers in this authentication group. size[128]
        set cert {string}   Name of certificate to identify this peer. size[35] - datasource(s): vpn.certificate.local.name
        set peer-accept {any | defined | one}   Determine if this auth group accepts, any peer, a list of defined peers, or just one peer.
                any      Accept any peer that can authenticate with this auth group.
                defined  Accept only the peers added with the wanopt peer command.
                one      Accept the peer added to this auth group using the peer option.
        set peer {string}   If peer-accept is set to one, select the name of one peer to add to this authentication group. The peer must have added with the wanopt peer command. size[35] - datasource(s): wanopt.peer.peer-host-id
    next
end

Additional information

The following section is for those options that require additional explanation.

auth-method {cert | psk}

Enter your preferred authentication method:

• Use cert (by default) to authenticate using a certificate. Once set, use the cert entry to specify the name of the certificate (see below).
• Use psk to authenticate using a pre-shared key. Once set, use the psk entry to specify the pre-shared key (see below).

cert <name>

Note: This entry is only available when auth-method is set to cert. Local certificate to be used by the peers in this authentication group. The certificate must have already been installed on the FortiGate before entering it here.

psk <preshared-key>

Note: This entry is only available when auth-method is set to psk. Pre-shared key to be used for the authentication group.

peer-accept {any | defined | one}

Specify whether the authentication group can be used for any peer, only the defined peers that have been added to the FortiGate unit, or just one specific peer. If you select one, use the peer entry to add the name of the peer to the authentication group.

peer

Note: This entry is only available when peer-accept is set to one. Name of one peer to add to this authentication group. The peer must have already been added to the FortiGate before entering it here.