Understanding ADVPN Tunnel Creation in FortiGate

[sk4]

Hello Everyone,

It would be greatly appreciated if someone could explain the specific information exchanged during the ADVPN tunnel creation process—particularly in the following IKE messages:

• Shortcut Offer
• Shortcut Query
• Shortcut Reply
• Shortcut Negotiation

These messages are part of FortiGate’s ADVPN (Auto Discovery VPN) mechanism, which enables dynamic spoke-to-spoke tunnels without manual configuration.

[funkylicious]

hi,

have a read here 

https://docs.fortinet.com/document/fortigate/7.0.17/administration-guide/985659/advpn-and-shortcut-p... 

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Fortinet-Auto-Discovery-VPN-ADVPN/ta-p/195... 

[sk4]

Thanks for sharing the document appreciate if you can share something where i can see all those details are available in these packets - i.e. offer message , query and reply in ADVPN negotiation. 

[funkylicious]

I think you can find more information about these specific messages in the SD-WAN and/or NSE7 Enterprise Firewall training materials