Fortinet Document Library

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:


Table of Contents

Administration Guide

IPsec VPN Wizard (per-device management)

When per-device management is enabled, the SD-WAN settings pane includes access to an IPsec VPN Wizard. You can use the wizard to create IPsec VPN tunnels and automatically generate interface members for the tunnel.

To configure the IPsec VPN in SD-WAN:
  1. Ensure that you are in the correct ADOM and that SD-WAN per-device management is enabled for the ADOM.
  2. Go to Device Manager > SD-WAN > SD-WAN.
  3. Select any device or VDOM and click Edit. If no device is available, click Create New.

    The Edit SD-WAN pane or Create New SD-WAN is displayed.

  4. Under Interface Members, click Create VPN.

     

  5. Configure the following settings, and click OK to generate IPsec VPNs:

    Name

    Specify a name for the VPN.

    Remote Device

    Select IP Address or Dynamic DNS.

    IP Address

    Specify the IP address if IP Address is selected for Remote Device.

    FQDN

    Specify the FQDN if Dynamic DNS is selected for Remote Device.

    Outgoing Interface

    Select the outgoing interface.

    Authentication Method

    Select Pre-shared key or Signature.

    Certificate Name

    Select the certificate (if Signature was selected as the Authentication Method)

    Peer Certificate CA

    Select the Peer Certificate CA (if Signature was selected as the Authentication Method)

    Pre-shared Key

    Select the pre-shared key (if Pre-shared key was selected as the Authentication Method)

    The auto-generated VPN interface is automatically added to the list of SD-WAN interface members.

  6. Edit the VPN in Interface Members to configure Gateway IP, Estimated Upstream Bandwidth (Kbps), and Estimated Downstream Bandwidth (Kbps).

IPsec VPN Wizard (per-device management)

When per-device management is enabled, the SD-WAN settings pane includes access to an IPsec VPN Wizard. You can use the wizard to create IPsec VPN tunnels and automatically generate interface members for the tunnel.

To configure the IPsec VPN in SD-WAN:
  1. Ensure that you are in the correct ADOM and that SD-WAN per-device management is enabled for the ADOM.
  2. Go to Device Manager > SD-WAN > SD-WAN.
  3. Select any device or VDOM and click Edit. If no device is available, click Create New.

    The Edit SD-WAN pane or Create New SD-WAN is displayed.

  4. Under Interface Members, click Create VPN.

     

  5. Configure the following settings, and click OK to generate IPsec VPNs:

    Name

    Specify a name for the VPN.

    Remote Device

    Select IP Address or Dynamic DNS.

    IP Address

    Specify the IP address if IP Address is selected for Remote Device.

    FQDN

    Specify the FQDN if Dynamic DNS is selected for Remote Device.

    Outgoing Interface

    Select the outgoing interface.

    Authentication Method

    Select Pre-shared key or Signature.

    Certificate Name

    Select the certificate (if Signature was selected as the Authentication Method)

    Peer Certificate CA

    Select the Peer Certificate CA (if Signature was selected as the Authentication Method)

    Pre-shared Key

    Select the pre-shared key (if Pre-shared key was selected as the Authentication Method)

    The auto-generated VPN interface is automatically added to the list of SD-WAN interface members.

  6. Edit the VPN in Interface Members to configure Gateway IP, Estimated Upstream Bandwidth (Kbps), and Estimated Downstream Bandwidth (Kbps).