Fortigate-Meraki VPN success
I didn't find much information on setting up a VPN with a Fortigate and a Meraki SA so thought I would post how I got it to work in case anyone else needs to do the same:
1) Meraki has a well-documented config to use on their end with non-Meraki peers so I will not repeat that here.
2) Create VPN-IPsec-Tunnel on the Fortigate matching the Meraki config parameters in Step 1. All Unchecked: Mode Config, NAT Traversal, Dead Peer Detection, Enable Replay Detection, Enable PFS, Autokey Keep Alive, Auto-negotiate.
3) Create static route on Fortigate from internal subnet to VPN named in step 2.
4) Create policies inbound and outbound to/from internal and remote subnets using the internal and VPN interfaces, respectively.
I was working with Fortigate 60C and 40C with FortiOS 5.2.2 and 5.2.5. The two main gotchas for me were Mode Config and the static route.
