Technical Tip: Configuring WAN optimization on a FortiGate unit and FortiClient software through an IPsec VPN tunnel

Description

To configure WAN optimization through an IPsec VPN tunnel, first configure a dial-up VPN setup. For details, see the FortiGate and FortiClient documentation at http://docs.fortinet.com .

To configure the FortiGate unit: 

1. On the FortiGate unit, go to WAN Opt.. & Cache > Rule and select Create New.
2. Enter the Source address as the VPN virtual adapter IP range.
3. Enter the Destination address as the server IP range.
4. Enter a Port number. It can be set to allow any or fix to specific port.
5. Select OK.
6. Go to WAN Opt. & Cache > Peer > Authentication group and select Create New.
7. Enter the name as auth-fc.
8. Set the Authentication Method to Certificate and select certificate to be Fortinet_Firmware (As this group and authentication have been embedded in FortiClient so can't use any other name).

To configure the FortiClient software:

1. Go to General > WAN Optimization.
2. Select Enable WAN Optimization.
3. Select the services that require optimization.
4. Enter the size of disk cache.
5. Select Apply.

Scope


Solution

Related Articles

FortiClient and FortiGate interoperability technical note

FortiClient to FortiGate VPN