Wikisysop: Created page with "'''Prerequisite:''' * FortiGate firewall * SILBO Router or gateway * Static Public IP on wired internet connection * SIM card with active internet Note: This document is prepared using FortiGate FW v7.0.13 & SILBO 1.16_1.13 FW version. FortiGate VPN setup Create a new IPSec tunnel via VPN -> IPSec Tunnels -> (+) Create New 624x624px IPsec Wizard will open, then follow below steps: * Give a name to IPsec VPN to Identif..."

2024-07-31T07:07:44Z

Created page with "'''Prerequisite:''' * FortiGate firewall * SILBO Router or gateway * Static Public IP on wired internet connection * SIM card with active internet Note: This document is prepared using FortiGate FW v7.0.13 & SILBO 1.16_1.13 FW version. FortiGate VPN setup Create a new IPSec tunnel via VPN -> IPSec Tunnels -> (+) Create New frameless|624x624px IPsec Wizard will open, then follow below steps: * Give a name to IPsec VPN to Identif..."

New page

'''Prerequisite:'''

* FortiGate firewall
* SILBO Router or gateway
* Static Public IP on wired internet connection
* SIM card with active internet

Note: This document is prepared using FortiGate FW v7.0.13 & SILBO 1.16_1.13 FW version.

FortiGate VPN setup

Create a new IPSec tunnel via VPN -> IPSec Tunnels -> (+) Create New

[[File:FortiGate VPN Setup.png|frameless|624x624px]]

IPsec Wizard will open, then follow below steps:

* Give a name to IPsec VPN to Identify
* Select “Site to Site” and select remote device as “Cisco”

* Select “No NAT between sites” Option

[[File:FortiGate VPN setup Wizard.png|frameless|624x624px]]

* WAN IP address of a SILBO Router/gateway (As we do not have fix WAN IP, we provided a LAN IP and that will be removed later during ????????)
* Select Outgoing Interface to the one that FortiGate will be using to communicate with Remote Device that is WAN interface.
* Choose a pre-shared key and make sure you will configure in SILBO device and click next.

[[File:FortiGate VPN setup Wizard 1.png|frameless|624x624px]]

* Select Internal (FortiGate’s LAN) interface that you wish to use in IPsec.
* Local Subnets field will populate automatically.
* Put SILBO LAN subnet in Remote Subnets field and click on next.

[[File:FortiGate VPN setup Wizard 2.png|frameless|624x624px]]

Verify all the configurations as shown

[[File:FortiGate VPN setup Wizard 3.png|frameless|624x624px]]

In case you wish to add more tunnels you can do.

[[File:FortiGate VPN setup Wizard 4.png|frameless|624x624px]]

Once configuration is saved it should show as below.

[[File:FortiGate VPN setup Wizard Final.png|frameless|624x624px]]

Now convert the tunnel to custom as shown below.

[[File:Converting tunnel to custom.png|frameless|624x624px]]

Once saved it should move to custom VPN as shown below.

[[File:Fortigate Firewall Custom VPN.png|frameless|624x624px]]

Start editing configuration further as shown in below images.

[[File:Fortigate Firewall Configuration further.png|frameless|624x624px]]

[[File:Fortigate Firewall VPN Configuration.png|frameless|624x624px]]

[[File:Fortigate Firewall VPN Configuration 1.png|frameless|624x624px]]

[[File:Fortigate Firewall VPN Configuration 2.png|frameless|596x596px]]

'''Configuring SILBO Router/gateway:'''

'''Login to router using default IP 192.168.10.1 and default credentials admin/admin.'''

[[File:Log In.png|frameless|624x624px]]

Once login we can see the FW version.

[[File:Firmware Version Dashboard.png|frameless|624x624px]]

Change the IP address to required IP, in this testing we are using 192.168.11.1 IP address.

To do that Navigate to Settings>>Network from 192.168.10.1 to 192.168.11.1 and save / update.

Upon IP changed configure VPN.

Navigate to >> Settings>>VPN>> IPsec>> and do as per below images

[[File:Fortigate firewall VPN config.png|frameless|624x624px]]

[[File:Fortigate Firewall VPN Configuration Dashboard.png|frameless|624x624px]]

Once all the configuration is correctly configured and clicked on save button device will show VPN configuration >> General settings.

Save and then navigate to VPN>>Ipsec setting page and click on update.

In some time IPsec will come up and it can be seen as established as shown below.

[[File:VPN IPSEC changes RC44.png|frameless|624x624px]]

Also in FortiGate it can be seen as below.

[[File:Fortigate status.png|frameless|624x624px]]

To Ping server LAN, navigate to features>>Others and give LAN IP and ping.

If the ping is not working then check the firewall side settings whether the ping is allowed or not.

[[File:Fortigate VPN Others Options.png|frameless|624x624px]]

IPsec VPN between SILBO and Fortigate firewall - Revision history