Skip to main content
Faulcons
New Member
November 20, 2023
Question

S2S IPSec FortiGate-FTD remote ID Configuration

  • November 20, 2023
  • 2 replies
  • 1375 views

Hello Everyone, 

I am contacting you today because I am interested in creating an IPsec tunnel between a FortiGate & FTD.

In that context, the reason why is as follow : 

  • I have two FTD in AWS and in different zones
  • They are natted behind a public IP address with a private address on the WAN interface.
  • Therefore, using the "remote ID" option would useful, because, instead of using the private IP (which is different on both FTD. i would be using the same remote ID for both firewalls.
  • That way, i don't need to bother change the private IP address on all of my 45 On-Prem offices in case the  primary FTD goes down.

My question is as follow, how can I use a remote ID on FortiGate using IKEv2 configuration ? (i see this option is only available in IKEv1 configuration.

 

I thank you all for your help.

2 replies

Hong_FTNT
Staff & Editor
Staff & Editor
November 20, 2023

Hi @Faulcons,

 

Are you referring to 'Peer ID' option? Peer ID option should be available for both IKEv1 and IKEv2 if the Remote Gateway is set to Dialup User. 

 

Regards, 

Faulcons
FaulconsAuthor
New Member
November 20, 2023

Hello Hbac, 

 

Thank for getting back to me on this topic so quickly.

I have already checked the dialup option, but i don't think it will work for my setup.

I will try to make a diagram if that can help explain what i am looking for.

Will get back to you soon.

Have a nice day.

 

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT