Fortigate IPSEC route-based and Linux

[argonich]

Hello all, Can you provide some manual with configuration of IPSEC on Linux side. My Fortgate work in route based policy. And i don' t know how to setup a " virtual interface" on the Linux side. Does someone have a manual or example of config? Please help me as fast as u can :)

[emnoc]

Yes agreed, do you really need OSPF or routing information? in a route base approach the static route that your install to that vpn-tunnel interface is all that you need. I think your making it overly complex. btw, if you do run quagga/zebra on the LFW ( linux firewall ) and with ospf for example, the quagga/zebra ospf daemon, will inject the remote_subnet address as defined in your ipsec.conf file , into the OSPF process. So if you need reach locally for some downwind routers/firewall , they will learned this via ospf if you config it.