Fortinet fortigate-200a Betriebsanweisung

See 

Arrange the policies in the following order:

• encrypt policies

• default non-encrypt policy (Internal_All -> External_All).

The VPN concentrator collects the hub-and-spoke tunnels into a group. This allows 
VPN traffic to pass from one tunnel to the other through the FortiGate unit. With this 
configuration, the FortiGate unit functions as a concentrator, or hub, within a hub-and-
spoke network.

Go to VPN > IPSEC > Concentrator.

Select New to add a VPN concentrator.

Enter the name of the new concentrator in the Concentrator Name field.

To add tunnels to the VPN concentrator, select a VPN tunnel from the Available 
Tunnels list and select the right arrow.

To remove tunnels from the VPN concentrator, select the tunnel in the Members list 
and select the left arrow.

Select OK to add the VPN concentrator.

Internal_All 

The VPN spoke address.

ENCRYPT

The VPN spoke tunnel name.

Allow inbound Select allow inbound.
Allow outbound Select allow outbound.
Inbound NAT

Select inbound NAT if required.

Outbound NAT Select outbound NAT if required.