How to get access to this post

[AntonioTorresMiguez]

Hello,

We have a problem with a client to create two VPN IPSEC DialUP.  How can I get access to the following post?

https://community.fortinet.com/t5/Internal-Knowledge-Base-Articles/Technical-Tip-Using-Peer-ID-to-co...

common.feature.saml.dev.post.page_title

Thank you.

[ede_pfau · Accepted solution]

Your link is internal, this probably is the published article:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-use-Peer-IDs-to-select-an-IPSec-dia...

and some background info about the selection process:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Dynamic-IPsec-VPN-Responder-Dialup-Selecti...

The trouble is, if you start to build a VPN infrastructure, you might overlook to introduce peer IDs with your first dialup tunnel. After all, it works without. Only later, when you need the second or more dialup tunnel, you will notice that sometimes the tunnel won't come up. But it may be too late to get a peer ID into your Forticlient configs...if not managed centrally.

One workaround might be (see second article) to use different proposals in phase1. They are part of the selection process.

And then use peer IDs for all upcoming new dialup tunnels.

[AntonioTorresMiguez]

Thank you for your help, this was very useful.

[alif]

Hi @AntonioTorresMiguez,

You can also check the below link if it helps.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Use-of-PeerID-and-LocalID-in-IPsec-VPN-bet...