Fortinet black logo

Administration Guide

Using IPsec Fortinet recommended template

Using IPsec Fortinet recommended template

FortiManager includes a default, read-only IPsec template named IPsec_Fortinet_Recommended that includes recommended VPN tunnel and best practices.

You can clone the default template, tweak the settings, and assign the template to one or more devices.

When you install device settings to assigned devices, phase1/phase2 interface configurations from the template are installed.

To use the IPsec Fortinet recommended template:
  1. Go to Device Manager > Provisioning Templates > IPsec Tunnel Templates.
  2. Clone the IPsec_Fortinet_Recommended template:
    1. Select the IPsec_Fortinet_Recommended template, and click Clone in the toolbar.

      The Clone IPsec Template dialog is displayed.

    2. In the Name box, type a name for the new template, and click OK.

      The cloned template is displayed in the content pane.

  3. Edit the new template:
    1. Double-click the template to open it for editing, or select the template, and click Edit in the toolbar.

      The template opens for editing. The template includes default tunnel settings named default.

    2. Select default, and click Edit.

      The default tunnel settings open for editing.

    3. Edit the settings, and click OK to save the changes.
  4. Assign the template to one or more devices or device groups. See Assigning IPsec VPN template to devices and device groups.

Using IPsec Fortinet recommended template

FortiManager includes a default, read-only IPsec template named IPsec_Fortinet_Recommended that includes recommended VPN tunnel and best practices.

You can clone the default template, tweak the settings, and assign the template to one or more devices.

When you install device settings to assigned devices, phase1/phase2 interface configurations from the template are installed.

To use the IPsec Fortinet recommended template:
  1. Go to Device Manager > Provisioning Templates > IPsec Tunnel Templates.
  2. Clone the IPsec_Fortinet_Recommended template:
    1. Select the IPsec_Fortinet_Recommended template, and click Clone in the toolbar.

      The Clone IPsec Template dialog is displayed.

    2. In the Name box, type a name for the new template, and click OK.

      The cloned template is displayed in the content pane.

  3. Edit the new template:
    1. Double-click the template to open it for editing, or select the template, and click Edit in the toolbar.

      The template opens for editing. The template includes default tunnel settings named default.

    2. Select default, and click Edit.

      The default tunnel settings open for editing.

    3. Edit the settings, and click OK to save the changes.
  4. Assign the template to one or more devices or device groups. See Assigning IPsec VPN template to devices and device groups.