how to create point to multiple ipsec tunnel from fortigate with Cisco Router

[Suh_Ahamed]

Hello, 

We have use case to create an IPSec tunnel from the Fortigate 100F firewall to the remote end Cisco Router at three different locations.  ( Point to multiple point ) . We have a single Public IP address for the WAN (/30).

Please advise it is possible in the FortiGate ?  please find below diagram. 

[Toshi_Esumi]

Just treat them as three different point-to-points/IPsecs then route between them using the ipsec (phase1-) interfaces.

Toshi

[Suh_Ahamed]

Hi,

Thnaks, other end is the cisco router and the router base IP sec tunnel is supported with the above solution? 

[Toshi_Esumi]

Each Cisco router doesn't, or doesn't have to, know if the FGT has two more IPsecs. It's just terminating a single IPsec VPN and route all destinations into the tunnel. It's the most basic set up.
So not only Cisco but virtually any other routers that support IPsec VPN and static routing would work.

By the way, route based or policy based IPsec are just locally significant aspect of VPN setup. The other end doesn't know about it. So even if you used policy based IPSec on the cisco side and route/interface based IPsecs on the FGT side, the combination should work fine too. In other words, that doesn't matter.

Toshi 

[Dhruvin_patel]

Greetings,

Create three site-to-site IPsec VPN tunnels between Fortigate 100F and three remote locations.

This document will help to create a tunnel, https://community.cisco.com/legacyfs/online/attachments/discussion/configuring-ipsec-vpn-with-a-fort...

 Regards!

If you have found a solution, please like and accept it to make it easily accessible for others.

[amrit]

There shouldn't be any problem in this scenario. Multiple IPsec tunnels can be created on a single interface to multiple remote locations. 

Additionally: It is also possible to create multiple IPsec tunnels from the same interface to the same remote location. Please refer to this link  https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-establish-more-than-one-IPsec-tunne...