TUNNEL VPN SITE TO SITE AND REMOTE ACESS

Hi,

Please see Technical Tip: How to load/convert a FortiGate con... - Fortinet Community if it  may help, ideally copying the config to another FortiGate on same version should be possible.

Best regards,

Jin

you could get yourselve an unencrypted backup of that FGT. Then open that in some Text Editor and find the vpn config.

For IPSEC it starts with "config vpn ipsec". You need to get Phase1 and Phase 2 config of the tunnel. 

You can then run that as script on the other FGT or paste into cli.

Just make sure you run the same FortiOS version on both because that could create issues with content that is only stored encrypted in the config like ipsec psks since the encryption changed between fortios versions.

Also you would need to copy all objects the ipsec depends on. That might be adresses/addressgroups if you use mode config or user/usergroups for xauth.

Also keep in mind that you might need to copy static routing and policies since IPSec will not come up if there is no policy for it.