Rise Company
02-09-2019, 03:56
فايروول فورتي جيت FortiGate Firewall في بي ان IPsec VPN with FortiClient
شرح تفصيلى / خطوات / اعدادات الفي بي ان OS: FortiOSVersion: 6.0+
Configure Remote Access IPSec VPN in FortiGate Firewall
Step 1 – Create Address Group for Forticlient
Policy & Objects > Addresses > click Create New > click Address Group
You must choose the IP range that is never used in your network. While connecting to FortiGate firewall, Forticlients will receive IP address from this
range. For example, 192.168.180.0/24
https://www.rise.company/forum/images/imported/2019/09/17.png
Step 2 – Create User and User Group
Our recommendation is to configure Active Directory User Group instead of creating local user account on firewall appliance. AD provides lots of convenience in user management.
https://www.rise.company/forum/images/imported/2019/09/18.png
Step 3 – VPN Wizard
In the first wizard, choose Remote Access option and FortiClient connectivity.
https://www.rise.company/forum/images/imported/2019/09/19.png
Specify Pre-shared key for firewall to authorize clients before prompting for additional credentials.
https://www.rise.company/forum/images/imported/2019/09/20.png
LAN interface is the interface that your local systems are connected.
Client Address Range: specify DHCP pool range for Forticlients, this should be in the same IP range as specified in Step 1.
Split tunnel allows Forticlients to access your corporate systems and at the same, Internet can be accessed over their home, hotel or wherever they are located.
https://www.rise.company/forum/images/imported/2019/09/21.png
Save Password: Allows the user to save the VPN connection password in the console.
Auto Connect: When FortiClient is launched, the VPN connection will automatically connect.
Always Up (Keep Alive): When selected, the VPN connection is always up even when no data is being processed. If the connection fails, keep alive packets sent to the FortiGate will sense when the VPN connection is available and re-connect.
https://www.rise.company/forum/images/imported/2019/09/22.png
Step 4 – Create Firewall IPv4 Policy
https://www.rise.company/forum/images/imported/2019/09/23.png
Final Step – Download and configure Forticlient
Download Forticlient here and establish IPSec VPN connection to your corporate network.
https://www.rise.company/forum/images/imported/2019/09/24.png
شرح تفصيلى / خطوات / اعدادات الفي بي ان OS: FortiOSVersion: 6.0+
Configure Remote Access IPSec VPN in FortiGate Firewall
Step 1 – Create Address Group for Forticlient
Policy & Objects > Addresses > click Create New > click Address Group
You must choose the IP range that is never used in your network. While connecting to FortiGate firewall, Forticlients will receive IP address from this
range. For example, 192.168.180.0/24
https://www.rise.company/forum/images/imported/2019/09/17.png
Step 2 – Create User and User Group
Our recommendation is to configure Active Directory User Group instead of creating local user account on firewall appliance. AD provides lots of convenience in user management.
https://www.rise.company/forum/images/imported/2019/09/18.png
Step 3 – VPN Wizard
In the first wizard, choose Remote Access option and FortiClient connectivity.
https://www.rise.company/forum/images/imported/2019/09/19.png
Specify Pre-shared key for firewall to authorize clients before prompting for additional credentials.
https://www.rise.company/forum/images/imported/2019/09/20.png
LAN interface is the interface that your local systems are connected.
Client Address Range: specify DHCP pool range for Forticlients, this should be in the same IP range as specified in Step 1.
Split tunnel allows Forticlients to access your corporate systems and at the same, Internet can be accessed over their home, hotel or wherever they are located.
https://www.rise.company/forum/images/imported/2019/09/21.png
Save Password: Allows the user to save the VPN connection password in the console.
Auto Connect: When FortiClient is launched, the VPN connection will automatically connect.
Always Up (Keep Alive): When selected, the VPN connection is always up even when no data is being processed. If the connection fails, keep alive packets sent to the FortiGate will sense when the VPN connection is available and re-connect.
https://www.rise.company/forum/images/imported/2019/09/22.png
Step 4 – Create Firewall IPv4 Policy
https://www.rise.company/forum/images/imported/2019/09/23.png
Final Step – Download and configure Forticlient
Download Forticlient here and establish IPSec VPN connection to your corporate network.
https://www.rise.company/forum/images/imported/2019/09/24.png