Home > IT Answers > Networking > VPN between DLink and Fortinet
Techpupil
0 pts.
 VPN between DLink and Fortinet
D-Link, Firewall security, Fortinet, Hardware devices, Security products, VPN
Hi, I have a DLink - DI-824VUP+ and a Fortinet60. How can I create VPN tunnel between these two. Thanx.

Software/Hardware used:
ASKED: October 10, 2007  9:14 PM
UPDATED: November 14, 2007  7:23 PM
RELATED QUESTIONS
Answer Wiki:
In theory, you should be able to configure a VPN tunnel between these two. They both say that they support site to site VPN tunnels, IPSEC, and and IKE. Thus, if they really support the standards it *should* just work. However, from experience, configuring something like this can be a real pain. If it were me, I would just press to find a way to get the same device on each side because of all the unknow issues and time associated with trying to make it work. but that is just my opinion. Best of luck to you, David Davis Checkout my website: <a href="http://www.happyrouter.com">HappyRouter.com</a> - home of IT Training videos and Visit my <a href="http://itknowledgeexchange.techtarget.com/cisco/">ITKE Blog covering Cisco Routers!</a>
Last Wiki Answer Submitted:  October 15, 2007  4:25 pm  by  David Davis   155 pts.
All Answer Wiki Contributors:  David Davis   155 pts.
To see all answers submitted to the Answer Wiki: View Answer History.


RSS - Discussions Help
Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _

 

You should decide on your encryption level (DES/3DES/AES) depending on what each of these support. They should both have a user interface to plug in these values to. Possibly even via command line.

Remember for a site to site (as site to site requires an endpoint on each end which is usually a router or firewall) the configuration must match on both sides except for peer ip information will be flipped.

For instance if your Phase 1 is:

3DES
SHA1
DH 2
8600

and Phase 2 is

3DES
SHA1
no PFS

Then it must be the set this way on both ends of the vpn on each device.

You’ll also need to ensure the ACL’s match (the rules to allow traffic to your internal network from the remote network on each side)

I hope this gives you some direction, I can not vouch for compatibility of each unit as I am a Cisco ASA/PIX user, tho I have configured VPN’s through Watchguard’s, Firebox’s, Checkpoint’s, and Netscreen’s. Ipsec VPN’s are pretty much universal everywhere if they are site to site. Dynamic Ipsec VPN’s will be a little different. You’ll need to determine which VPN your firewall/router support.

Mnemonyss
 5 pts.