Swapping Firewalls VPN Setup Command Line

Better yet, can I just setup 2 FortiGate firewalls with a IPsec VPN with selecting the device type of Other? Then I can just use the same IPsecVPN when swapping and not change anything. Is there an advantage to selecting device type of FortiGate?

Hi @fortiNoob007,

I believe it is possible. You just need to make sure all settings match on both FortiGates. 

Regards, 

You can do it, but you need to make sure all settings are identical with the remote peer.

I would say the easiest way will be Fortinet IPSEC wizard on the new device, you can just enter the subnets and it will do the rest ( policy and routes)

you many need to input the pre shared key, because when you use the wizard it generates a random pre shared key.

I have the IPsec VPNs working. However, there is an issue. I have 2 subnets at the firewall that is a Sophos firewall. If I add both remote networks to the setup, the tunnel seems to randomly work with 1 of the 2 subnets. Both the Sophos firewall and the Fortigate show the tunnel working fine, but only traffic from 1 subnet will work. If I force the tunnel down, then up, they both work for about a minute, then 1 randomly stops and the other keeps working. I have it setup for testing now with only 1 subnet on each end, it has been working without disruption for around 2 days now. But the problem seems to be when I add the 2nd remote subnet. I have multiple Sophos firewalls with multiple subnets routing between them without any issues. I check my static routes and the firewall rules, all traffic is setup to correctly route and allow the flow. I have confirmed if I add say subnet A only, it works fine, then I remove subnet A and add subnet B as the remote network and it works fine again. But when both are added, it seems to get really goofy. I found this article,  but I haven't tried these steps yet. Any thoughts?