Fortigate site-to-site VPN
As a network engineer, I may need to connect different branches to use resources such as fileserver, webserver, sharepoint services in secure. In this lab, I will express site-to-site with two fortinet firewalls and one Cisco ASA firewall. That is a topology that I used for this lab.
Step 1. Initital configuration
Step 2. Fortinet VPN configuration
Step 3. Another site configuration
Step 4. Test vpn connection
Step 5. Fortigate - Cisco ASA VPN connection
Step 6. Cisco ASA vpn configuration
Step 7. Test vpn connection
Step 8. Troubleshooting
diagnose debug application ike -1
diagnose debug enable
diagnose vpn ike restart
diagnose debug reset
diagnose debug disable
In conclusion, there are vpn implementations, above, including different types of vendors, Fortigate-to-Fortigate and Fortigate-to-Cisco ASA. Fortigate vpn connection that has same type of fortigate is straightforward, however, Cisco ASA and fortigate vpn connection should be paid attention compared to the first implementation regarding IPSec, encryption, Diffie-Hellman group, authentication method etc.