View source for IPsec VPN between SILBO RS5X and Fortigate firewall

'''Prerequisite:'''

* FortiGate firewall
* SILBO Router or gateway
* Static Public IP on wired internet connection
* SIM card with active internet  

Note: This document is prepared using FortiGate FW v7.0.13 & SILBO 1.03_1.03R-C1 FW version.


FortiGate VPN setup

Create a new IPSec tunnel via VPN -> IPSec Tunnels -> (+) Create New

[[File:FortiGate_VPN_Setup.png|frameless|624x624px]]

IPsec Wizard will open, then follow below steps:

* Give a name to IPsec VPN to Identify
* Select “Site to Site” and select remote device as “Cisco”

* Select “No NAT between sites” Option

[[File:FortiGate_VPN_setup_Wizard.png|frameless|624x624px]]

* WAN IP address of a SILBO Router/gateway (As we do not have fix WAN IP, we provided a LAN IP and that will be removed later during ????????)
* Select Outgoing Interface to the one that FortiGate will be using to communicate with Remote Device that is WAN interface.
* Choose a pre-shared key and make sure you will configure in SILBO device and click next.

[[File:FortiGate_VPN_setup_Wizard_1.png|frameless|624x624px]]

* Select Internal (FortiGate’s LAN) interface that you wish to use in IPsec.
* Local Subnets field will populate automatically.
* Put SILBO LAN subnet in Remote Subnets field and click on next.

[[File:FortiGate_VPN_setup_Wizard_2.png|frameless|624x624px]]

Verify all the configurations as shown

[[File:FortiGate_VPN_setup_Wizard_3.png|frameless|624x624px]]

In case you wish to add more tunnels you can do.

[[File:FortiGate_VPN_setup_Wizard_4.png|frameless|624x624px]]

Once configuration is saved it should show as below.

[[File:FortiGate_VPN_setup_Wizard_Final.png|frameless|624x624px]]

Now convert the tunnel to custom as shown below.

[[File:Converting_tunnel_to_custom.png|frameless|624x624px]]

Once saved it should move to custom VPN as shown below.

[[File:Fortigate_Firewall_Custom_VPN.png|frameless|624x624px]]

Start editing configuration further as shown in below images.

[[File:Fortigate_Firewall_Configuration_further.png|frameless|624x624px]]

[[File:Fortigate_Firewall_VPN_Configuration.png|frameless|624x624px]]

[[File:Fortigate_Firewall_VPN_Configuration_1.png|frameless|624x624px]]

[[File:Fortigate_Firewall_VPN_Configuration_2.png|frameless|596x596px]]

'''Configuring SILBO Router/gateway:'''

'''Login to router using default IP 192.168.10.1 and default credentials admin/admin.'''

[[File:Log_In.png|frameless|624x624px]]

Once login we can see the FW version.

[[File:IA44A_Info_System_Section.png|frameless|620x620px]]

Change the IP address to required IP, in this testing we are using 192.168.11.1 IP address.

To do that Navigate to Settings>>Network from 192.168.10.1 to 192.168.11.1 and save / update.

Upon IP changed configure VPN.

Navigate to >> Settings>>VPN>> IPsec>> and do as per below images

[[File:Fortigate_firewall_VPN_config.png|frameless|624x624px]]

[[File:Fortigate_Firewall_VPN_Configuration_Dashboard.png|frameless|624x624px]]

Once all the configuration is correctly configured and clicked on save button device will show VPN configuration >> General settings.

Save and then navigate to VPN>>Ipsec setting page and click on update.

In some time IPsec will come up and it can be seen as established as shown below.

[[File:VPN_IPSEC_changes_RC44.png|frameless|624x624px]]

Also in FortiGate it can be seen as below.

[[File:Fortigate_status.png|frameless|624x624px]]

To Ping server LAN, navigate to features>>Others and give LAN IP and ping.

If the ping is not working then check the firewall side settings whether the ping is allowed or not.

[[File:Fortigate_VPN_Others_Options.png|frameless|624x624px]]