Timestamp:

04/05/09 17:18:36 (17 months ago)

Author:

admin

Comment:

--

HowtoFortigate

@@ -25 +25 @@
 Several address definitions must be created. These will be used later in other parts of the gateway configuration. Navigate to the following screen using the pane on the left hand side of the browser interface.
 
-[[Image(http://www.shrew.net/vpn/howto/Fortigate/nav-1a.jpg)]]
+[[Image(http://www.shrew.net/static/howto/Fortigate/nav-1a.jpg)]]
 
 To create a new address definition, click on the ''Create New'' button at the top of the page.
 
-[[Image(http://www.shrew.net/vpn/howto/Fortigate/nav-1b.jpg)]]
+[[Image(http://www.shrew.net/static/howto/Fortigate/nav-1b.jpg)]]
 
 ==== Wan Interface Entry ====
@@ -44 +44 @@
 When finished click OK.
 
-[[Image(http://www.shrew.net/vpn/howto/Fortigate/pic-1a.jpg)]]
+[[Image(http://www.shrew.net/static/howto/Fortigate/pic-1a.jpg)]]
 
 ==== Private Network Entry ====
@@ -59 +59 @@
 When finished click OK.
 
-[[Image(http://www.shrew.net/vpn/howto/Fortigate/pic-1b.jpg)]]
+[[Image(http://www.shrew.net/static/howto/Fortigate/pic-1b.jpg)]]
 
 === DHCP Server Parameters ===
@@ -65 +65 @@
 An IPsec over DHCP server must be created. This will define the parameters to be assigned to clients when they connect. Navigate to the following screen using the pane on the left hand side of the browser interface.
 
-[[Image(http://www.shrew.net/vpn/howto/Fortigate/nav-2a.jpg)]]
+[[Image(http://www.shrew.net/static/howto/Fortigate/nav-2a.jpg)]]
 
 To create a new DHCP server definition, click on the arrow next to your external interface name to expand the options. Then click on the plus icon to the right of the ''Servers'' option.
 
-[[Image(http://www.shrew.net/vpn/howto/Fortigate/nav-2b.jpg)]]
+[[Image(http://www.shrew.net/static/howto/Fortigate/nav-2b.jpg)]]
 
 When defining your DHCP parameters, make sure you select an address range that does not overlap with any private network protected by the Fortigate unit.
@@ -86 +86 @@
 When finished click OK.
 
-[[Image(http://www.shrew.net/vpn/howto/Fortigate/pic-2.jpg)]]
+[[Image(http://www.shrew.net/static/howto/Fortigate/pic-2.jpg)]]
 
 === Dialup Users ===
@@ -92 +92 @@
 Dialup user accounts must be created. These will be the user name and passwords a remote access users will use to authenticate with the gateway. Navigate to the following screen using the pane on the left hand side of the browser interface.
 
-[[Image(http://www.shrew.net/vpn/howto/Fortigate/nav-3a.jpg)]]
+[[Image(http://www.shrew.net/static/howto/Fortigate/nav-3a.jpg)]]
 
 To create a new user, click on the ''Create New'' button at the top of the page.
 
-[[Image(http://www.shrew.net/vpn/howto/Fortigate/nav-3b.jpg)]]
+[[Image(http://www.shrew.net/static/howto/Fortigate/nav-3b.jpg)]]
 
 Define the following parameters for each user account.
@@ -105 +105 @@
 When finished click OK.
 
-[[Image(http://www.shrew.net/vpn/howto/Fortigate/pic-3.jpg)]]
+[[Image(http://www.shrew.net/static/howto/Fortigate/pic-3.jpg)]]
 
 === Dialup User Group ===
@@ -111 +111 @@
 A dialup user group must be created. By placing a user account in this group, it will allow them to access the gateway using the client software. Navigate to the following screen using the pane on the left hand side of the browser interface.
 
-[[Image(http://www.shrew.net/vpn/howto/Fortigate/nav-4a.jpg)]]
+[[Image(http://www.shrew.net/static/howto/Fortigate/nav-4a.jpg)]]
 
 To create a new user group, click on the ''Create New'' button at the top of the page.
 
-[[Image(http://www.shrew.net/vpn/howto/Fortigate/nav-4b.jpg)]]
+[[Image(http://www.shrew.net/static/howto/Fortigate/nav-4b.jpg)]]
 
 Define the following parameters for each user account.
@@ -127 +127 @@
 When finished click OK.
 
-[[Image(http://www.shrew.net/vpn/howto/Fortigate/pic-4.jpg)]]
+[[Image(http://www.shrew.net/static/howto/Fortigate/pic-4.jpg)]]
 
 === Phase 1 Parameters ===
@@ -133 +133 @@
 The IKE phase 1 parameters must be configured for our remote access connections. Navigate to the following screen using the pane on the left hand side of the browser interface.
 
-[[Image(http://www.shrew.net/vpn/howto/Fortigate/nav-5a.jpg)]]
+[[Image(http://www.shrew.net/static/howto/Fortigate/nav-5a.jpg)]]
 
 To create a new Phase 1 definition, click on the ''Create Phase 1'' button at the top of the screen.
 
-[[Image(http://www.shrew.net/vpn/howto/Fortigate/nav-5b.jpg)]]
+[[Image(http://www.shrew.net/static/howto/Fortigate/nav-5b.jpg)]]
 
 Define the following parameters.
@@ -168 +168 @@
 When finished click OK.
 
-[[Image(http://www.shrew.net/vpn/howto/Fortigate/pic-5a.jpg)]]
+[[Image(http://www.shrew.net/static/howto/Fortigate/pic-5a.jpg)]]
 
 === Phase 2 Parameters ===
@@ -174 +174 @@
 The IKE phase 2 parameters must be configured for our remote access connections. Navigate to the following screen using the pane on the left hand side of the browser interface.
 
-[[Image(http://www.shrew.net/vpn/howto/Fortigate/nav-5a.jpg)]]
+[[Image(http://www.shrew.net/static/howto/Fortigate/nav-5a.jpg)]]
 
 To create a new Phase 2 definition, click on the ''Create Phase 1'' button at the top of the screen.
 
-[[Image(http://www.shrew.net/vpn/howto/Fortigate/nav-5c.jpg)]]
+[[Image(http://www.shrew.net/static/howto/Fortigate/nav-5c.jpg)]]
 
 Define the following parameters.
@@ -204 +204 @@
 When finished click OK.
 
-[[Image(http://www.shrew.net/vpn/howto/Fortigate/pic-5b.jpg)]]
+[[Image(http://www.shrew.net/static/howto/Fortigate/pic-5b.jpg)]]
 
 === Firewall Policies ===
@@ -210 +210 @@
 Firewall policies must be created to define the resources remote access clients will have access to. Navigate to the following screen using the pane on the left hand side of the browser interface.
 
-[[Image(http://www.shrew.net/vpn/howto/Fortigate/nav-6a.jpg)]]
+[[Image(http://www.shrew.net/static/howto/Fortigate/nav-6a.jpg)]]
 
 To create a new policy, click the ''Create New'' button at the top of the screen.
 
-[[Image(http://www.shrew.net/vpn/howto/Fortigate/nav-6b.jpg)]]
+[[Image(http://www.shrew.net/static/howto/Fortigate/nav-6b.jpg)]]
 
 The first policy will allow clients to communicate with the external interface DHCP server.
@@ -238 +238 @@
 When finished click OK.
 
-[[Image(http://www.shrew.net/vpn/howto/Fortigate/pic-6a.jpg)]]
+[[Image(http://www.shrew.net/static/howto/Fortigate/pic-6a.jpg)]]
 
 The second policy will allow clients to communicate with the private network protected by the Fortigate. A seperate policy needs to be created for each private network that should be accessible to remote access clients.
@@ -262 +262 @@
 When finished click OK.
 
-[[Image(http://www.shrew.net/vpn/howto/Fortigate/pic-6b.jpg)]]
+[[Image(http://www.shrew.net/static/howto/Fortigate/pic-6b.jpg)]]
 
 == Client Configuration ==
@@ -302 +302 @@
 == Resources ==
 
- * [http://www.shrew.net/vpn/howto/Fortigate/fortigate.vpn Example Client configuration]
+ * [http://www.shrew.net/static/howto/Fortigate/fortigate.vpn Example Client configuration]