VPN interface mode with concentrator???

[jtengono]

I' ve looked every where in the documentation but have not been able to find if VPN interface mode is able to work with the concentrator. I will greatly appreciate all the information you can provide. John Tengono

[#2]

have you checked this ? http://kb.fortinet.com/kb/microsites/search.do?cmd=displayKC&docType=kc&externalId=10230&sliceId=1&docTypeID=DT_KCARTICLE_1_1&dialogID=7944557&stateId=0%200%207946300

[jtengono]

http://kb.fortinet.com/kb/microsites/search.do?cmd=displayKC&docType=kc&externalId=10230&sliceId=1&docTypeID=DT_KCARTICLE_1_1&dialogID=7944557&stateId=0%200%207946300

Actually I was asking about the concentrator function in the FORTIGATE.....

[ddskier]

We are using " Interface Mode" and the concentrator now to interconnect several of our locations. Are you having trouble getting it working?

[jtengono]

Yes, I' m having a heck of a time making it work and can' t find enough information on it. Do you have any docs on it ?? Thanks for your response.

[RichardH]

My memory may be fuzzy but I thought the concatenator was for Policy Based routes only...

[abelio]

Hi,

ORIGINAL: RichardH My memory may be fuzzy but I thought the concatenator was for Policy Based routes only...

Not at all; doing vpn concentrator with interface or routed based vpns is very straightforward and is documented also. In this scenario, as tunnels are interfaces, you only need to define an ' interface zone' and put all your tunnels inside. Blocking or Allowing intra-zone traffic is your choice if you need AV/IPS...etc for that traffic or not. In former case you' ll need firewall policy from zone to zone itself to apply protection profiles. regards.,

[jtengono]

Thanks Abel, If you happen to have a link to the docs, I would greatly appreciate it. Also are you using static routing or dynamic routing for your implementations? Regards.

[abelio]

Do a search for " concentrator route based" within http://kb.fortinet.com regards,

[PauloP]

Have you ever read: docs.fortinet.com/fgt/handbook/fortigate-ipsec-40-mr1.pdf Everything is deeply explained in this doc. (There are other versions to earlier versions of FortiOS). Regards, Paulo