The tunnel is down until you initiate connection from the local FortiGate. To bring up the VPN tunnel on the local FortiGate:
Set the Remote Subnets to 172.16.200.0/24, which is the local FortiGate's port4 subnet. FortiOS automatically populates Local Subnets with 10.58.1.0/24. This is for the interface connected to the Azure local subnet. In FortiOS on the Azure FortiGate, go to Network > Interfaces. Set the Remote Subnets to 10.58.1.0/24, which is the Azure FortiGate's port2 subnet. FortiOS automatically populates Local Subnets with 172.16.200.0/24. Set the Authentication Method to Pre-shared Key. Enter an IP address of 40.115.111.31, which is the Azure FortiGate's port1 public IP address. For non dial-up situations where your local FortiGate has a public external IP address, you must choose No NAT between sites. For NAT Configuration, select This site is behind NAT. For the Remote Device Type, select FortiGate. For Template Type, select Site to Site. To configure a static route to connect to the Internet: This is for the interface connected to the local subnet. This is for the interface connected to the Internet. In FortiOS on the local FortiGate, go to Network > Interfaces. Verify the VPN tunnel on both the local FortiGate and the Azure FortiGate. Bring up the VPN tunnel on the local FortiGate. Configure a static route to connect to the Internet. 
The configuration guide using the GUI is consisted of the below steps: The following image shows the sample topology for this configuration:Īs per the above diagram the topology is consisted of a local FortiGate in a local environment with port5 configured as WAN and port 4 as LAN and a FortiGate located in Azure with port1 connected to WAN and port 2 connected to LAN. The following guide will provide a sample configuration scenario for a site to site VPN connection with a local FortiGate to an Azure FortiGate using IPsec VPN with static routing. FortiGate can be hardware, virtual and as we will see below a combination of both. FortiGate is suitable small networks and can support up to hyperscale datacenters and are ideal for hybrid environments as well. FortiGate are next generation network firewalls manufactured from Fortinet that provide security for your network and unmatched threat protection for businesses of any kind or size.
0 kommentar(er)
