Fortinet Document Library

Version:


Table of Contents

CLI Reference

6.0.6
Download PDF
Copy Link

vpn ipsec forticlient

Configure automatic VPN connection for FortiClient users. FortiClient users who wish to use automatic VPN configuration must be members of a user group. The command below creates a realm that associates the user group with phase 2 VPN configurations.

config vpn ipsec forticlient
    edit {realm}
    # Configure FortiClient policy realm.
        set realm {string}   FortiClient realm name. size[35]
        set usergroupname {string}   User group name for FortiClient users. size[35] - datasource(s): user.group.name
        set phase2name {string}   Phase 2 tunnel name that you defined in the FortiClient dialup configuration. size[35] - datasource(s): vpn.ipsec.phase2.name,vpn.ipsec.phase2-interface.name
        set status {enable | disable}   Enable/disable this FortiClient configuration.
    next
end

usergroupname <name>

Enter the name of a pre-existing user group created for dialup clients.

phase2name <name>

Enter the name of the pre-existing phase 2 tunnel configuration defined for the dialup-client configuration.

status {enable | disable}

Enable (by default) or disable IPsec VPN policy distribution.

vpn ipsec forticlient

Configure automatic VPN connection for FortiClient users. FortiClient users who wish to use automatic VPN configuration must be members of a user group. The command below creates a realm that associates the user group with phase 2 VPN configurations.

config vpn ipsec forticlient
    edit {realm}
    # Configure FortiClient policy realm.
        set realm {string}   FortiClient realm name. size[35]
        set usergroupname {string}   User group name for FortiClient users. size[35] - datasource(s): user.group.name
        set phase2name {string}   Phase 2 tunnel name that you defined in the FortiClient dialup configuration. size[35] - datasource(s): vpn.ipsec.phase2.name,vpn.ipsec.phase2-interface.name
        set status {enable | disable}   Enable/disable this FortiClient configuration.
    next
end

usergroupname <name>

Enter the name of a pre-existing user group created for dialup clients.

phase2name <name>

Enter the name of the pre-existing phase 2 tunnel configuration defined for the dialup-client configuration.

status {enable | disable}

Enable (by default) or disable IPsec VPN policy distribution.