FortiGate VPN Hub

Hello,

I have three FortiGate firewalls: A, B, and C.

- A ↔ B: IPsec tunnel
- A ↔ C: IPsec dialup tunnel

I want to allow communication between B and C **without a direct tunnel**, by using FortiGate A as a **VPN hub**.

Is this setup supported, and what are the best practices for routing, phase2 selectors, and policies in this case?

Thank you!