VPN Tunnel Mode in forti OS

[sarif]

Hi....I want to create VPN IPSec as Tunnel Mode, but when i Create the vpn the result is Interface mode. how i change to tunnel mode in fortios 5 ? Thank you

[neonbit]

Hi Sarif, The two modes modes available for IPSEC VPNs are policy based VPN and route/interface based VPNs. I don' t know what a tunnel mode IPSEC VPN is (unless you' re talking about SSL VPNs). If you want to configure policy based VPNs then you' ll need to enable them in the GUI. Goto System > Config > Features and click on ' Show more' . Scroll down and enable the ' Policy-based IPSEC VPN' option then click apply. You may have to log out/in to refresh the GUI.

[emnoc]

What do you mean you mean exactly by " tunnel mode" ? The vpn is configured as either route-base or policy-based and as phase1 or phase1-interface types. The latter is exclusive to " route-based" where you have a routed and a interface that' s defined in the next-hope of the route or you run a routing protocol over the interface. The only other type of vpn is that type that uses GRE over IPSEC, but even that still it' s a routed-based vpn by definition I would suggest you read the ipsec guide and the types of vpn http://docs.fortinet.com/uploaded/files/1086/fortigate-ipsec.pdf

[sarif]

Hi neonbit... Thank you it work...

[ede_pfau]

" tunnel mode" as opposed to " transport mode" is a specification of the IPsec protocol suite how the packet is encrypted. In tunnel mode, the complete packet is encrypted, in transport mode only the payload. So, Sarif mixed up 2 concepts initially. Good to know it' s working now.