Fortinet: How to Setup a Route-Based IPSec VPN Tunnel on a FortiGate Firewall

When it comes to remote work, VPN connections are a must. But they come in multiple shapes and sizes.

[AaronMichaelLong]

This is not a route-based VPN, this is a policy-based VPN configuration. The fact that you're identifying specific phase 2 proxy-IDs/selectors is what makes it policy-based.

[JRMZ]

This helped me greatly as my team is very new to Fortigate. I genuinely appreciate your time on this one!

[yushis]

Awesome video. I'm coming from Watchguard so this is a new experience for me. Straight and to the point.

[LakshyaCharms]

Hello, you said it's route based and but added local and remote subnets in interested traffic. Can you clarify?

[capcata]

This is NOT A routed VPN. This is a normal vpn.

[MohammedKhan]

Shouldn't route-based VPN be any network through tunnels and then control through the routing protocol which networks to allow?

[richhughsam]

This is a very good video, put together clear and concise. Well done!

[_eurosign]

Couldn’t be simpler than this. Many thanks.

[lostinvasion]

this helped me out a lot, thanks for sharing!

[conorpodonoghue]

Thanks for this. What would be really helpful is a network diagram.

[doctor.networks]

Great Video. Just one thing, This is a POLICY Based VPN not a ROUTE based VPN, a Route Based VPN is something like a GRE over IPsec or VTI tunnel. Something on which routing protocols can work.

[teknolojigundemi]

Good explanation.Every software update changes behaviour. I dont know it is similar today. There is a Tunnel Interface under WAN physical. What should its settings be like.

[tkb]

Excellent one. Can we create multiple tunnels to same destination remote IP ? If so, can please share the configs ?

[MohammedAli-pfoc]

Amazing, just one more question on 3:20 what u did again exactly and why??

[gre]

I think this is for policy based vpn tunnel not a route based. anyway thank you for your videos :)

[Spegarinos]

If we have a profile based firewall what is the difference in the settings ?

[RozzClips]

Hi what if there's 4 IP address ranges behind the sonic wall? How can add multiple ranges?

[adetutuogunsowo]

Can one implement a VPN tunnel on the LAN, two machines on different switches and VLANs but where inter-vlan routing happens at the layer 3 Fortinet FW? Thanks for your response

[svbakulin]

This is not route based VPN, it is an old school policy VPN.

[thecobblers]

Thought we should build a full 0.0.0.0/0 subnet both side for route based VPN?