Requirement of hub and spoke ipsec vpn in fortigate

[Umesh]

Hi All,

We have Ho office and wants to connect multiple branches to head office.  I am new to configure hub and spoke ipsec vpn. could please help us my query. 

HO office  ------- multiple branch offices

I have gone through docs.fortinet.com document. but could understand in details.

Thanks

[kmohan]

Hi Umesh

Kindly see the below KB article:

https://docs.fortinet.com/document/fortigate/5.4.0/cookbook/962850/site-to-site-ipsec-vpn-with-two-f...

https://community.spiceworks.com/t/fortigate-ipsec-vpn-tunnel-for-multiple-networks/367335

[AEK]

Hello

If you are not familiar with IPsec then it is better to use the wizard.

https://docs.fortinet.com/document/fortigate/7.2.10/administration-guide/853412

[goninda1]

You are going about this the completely wrong way. NAT the traffic on your spokes going to the hub. That way you can have all spoke tunnels up at the same time.

Although I guess you could create an SD-WAN zone for your IPsec interfaces and define that in your static routes, but again, this is the wrong way. Do it right and you will have a better result.