Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
sarif
New Contributor II

VPN Tunnel Mode in forti OS

Hi....I want to create VPN IPSec as Tunnel Mode, but when i Create the vpn the result is Interface mode. how i change to tunnel mode in fortios 5 ? Thank you
4 REPLIES 4
neonbit
Valued Contributor

Hi Sarif, The two modes modes available for IPSEC VPNs are policy based VPN and route/interface based VPNs. I don' t know what a tunnel mode IPSEC VPN is (unless you' re talking about SSL VPNs). If you want to configure policy based VPNs then you' ll need to enable them in the GUI. Goto System > Config > Features and click on ' Show more' . Scroll down and enable the ' Policy-based IPSEC VPN' option then click apply. You may have to log out/in to refresh the GUI.
emnoc
Esteemed Contributor III

What do you mean you mean exactly by " tunnel mode" ? The vpn is configured as either route-base or policy-based and as phase1 or phase1-interface types. The latter is exclusive to " route-based" where you have a routed and a interface that' s defined in the next-hope of the route or you run a routing protocol over the interface. The only other type of vpn is that type that uses GRE over IPSEC, but even that still it' s a routed-based vpn by definition I would suggest you read the ipsec guide and the types of vpn http://docs.fortinet.com/uploaded/files/1086/fortigate-ipsec.pdf

PCNSE 

NSE 

StrongSwan  

PCNSE NSE StrongSwan
sarif
New Contributor II

Hi neonbit... Thank you it work...
ede_pfau
SuperUser
SuperUser

" tunnel mode" as opposed to " transport mode" is a specification of the IPsec protocol suite how the packet is encrypted. In tunnel mode, the complete packet is encrypted, in transport mode only the payload. So, Sarif mixed up 2 concepts initially. Good to know it' s working now.
Ede Kernel panic: Aiee, killing interrupt handler!
Ede Kernel panic: Aiee, killing interrupt handler!
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors