Fortinet FortiGate 4000 Betriebsanweisung

Seite von 390
254
01-28006-0012-20041105
Fortinet Inc.
Manual key
VPN
Manual key list
Figure 126:IPSec VPN Manual Key list
Manual key options
Figure 127:Adding a manual key VPN tunnel
Create New
Select Create New to add a manual key configuration.
Remote Gateway
The IP address of the remote gateway.
Encryption 
Algorithm
The names of the encryption algorithms used by each manual key 
configuration.
Authentication 
Algorithm
The names of the authentication algorithms used by each manual key 
configuration.
Edit, view, or delete manual key configurations.
VPN Tunnel 
Name
Type a name for the VPN tunnel. 
Local SPI
The local Security Parameter Index (SPI) identifies the local manual key VPN 
peer. Enter a hexadecimal number (digits can be 0 to 9, a to f) in the range 
bb8 to FFFFFFF. This number must be added to the Remote SPI at the 
opposite end of the tunnel.
Remote SPI
The remote Security Parameter Index identifies the remote manual key VPN 
peer. Enter a hexadecimal number of up to eight digits in the range bb8 to 
FFFFFFF. This number must be added to the Local SPI at the opposite end of 
the tunnel.
Remote 
Gateway
Enter the external IP address of the FortiGate unit or other IPSec gateway at 
the opposite end of the tunnel.
Encryption 
Algorithm
Select an Encryption Algorithm from the list. 
Use the same algorithm at both ends of the tunnel.