Ipsec Interface mode with Mikrotik?

Forum|Forum|5 years ago
January 5, 2021
3 replies
5400 views

Hi'

I'm going soon to install on our network central fortigate UTM, it will be connected with some mikrotik routers using ipsec.

Now I'm thinking how to connect it. As I have many networks, I wouldn't rather use legacy ipsec in tunnel mode.

If I choose ipsec in interface mode how then should I configure Mikrotik side, should it be GRE Ipsec Interface? Or maybe Ipsec interface mode can be configured only between Fortigate devices?

thanks for help.

zvideoz

New Member

Hi, I spent several days on this issue, but did not find a fully working solution. This is the hottest topic now in medium-sized business. Many people refuse to integrate FortiGate, so it is difficult to make friends with a MicrotiK.

rwpatterson

New Member

How you configure the Fortigate has nothing to do with the remote end. They cannot tell if the FGT is in interface or tunnel mode. A tunnel is a tunnel as far as they know. I have broken down FGT tunnels in tunnel mode and brought them back up in interface mode. The credentials are the same. The difference boils down to a check box during creation. (Oh, and the routing definition and policy is different too)