Other VPN topics

The following topics provide instructions on configuring other VPN topics.

• VPN and ASIC offload

• Encryption algorithms

• Fragmenting IP packets before IPsec encapsulation

• Configure DSCP for IPsec tunnels

• Defining gateway IP addresses in IPsec with mode-config and DHCP

• FQDN support for remote gateways

• Windows IKEv2 native VPN with user certificate

• IPsec IKE load balancing based on FortiSASE account information

• IPsec SA key retrieval from a KMS server using KMIP

• IPsec key retrieval with a QKD system using the ETSI standardized API

• Securely exchange serial numbers between FortiGates connected with IPsec VPN

• Multiple interface monitoring for IPsec

• Encapsulate ESP packets within TCP headers

• Cross-validation for IPsec VPN

• Resuming sessions for IPsec tunnel IKE version 2