Under IKE (Phase 1) Proposal, select Main Mode from the Exchange menu.

Under Destination Networks, select Choose destination network from list: and select the address object Remote network (Site B network).

Under Local Networks, select a local network from Choose local network from list: and select the address object X0 Subnet (LAN Primary Subnet).

The Shared Secret must be at least 4 characters long, and should comprise both numbers and letters.

Enter a Shared Secret password to be used to setup the Security Association the Shared Secret and Confirm Shared Secret fields.

NOTE: Secondary gateways are not supported with IKEv2. If the Remote VPN device supports more than one endpoint, you may optionally enter a second host name or IP address of the remote connection in the IPSec Secondary Gateway Name or Address field.

Enter the WAN IP address of the remote connection in the IPSec Primary Gateway Name or Address field (Enter Site B's Palo Alto WAN IP address).Enter a name for the policy in the Name field.Select IKE using Preshared Secret from the Authentication Method menu.Click Add Configure the Address Objects as mentioned in the figure above, click Add and click close when finished.Ĭonfiguring a VPN policy on Site A SonicWall.Click Manage in the top navigation menu.Login to the SonicWall management Interface.

The below resolution is for customers using SonicOS 6.5 firmware. This release includes significant user interface changes and many new features that are different from the SonicOS 6.2 and earlier firmware.

When configuring a Site-to-Site VPN tunnel in SonicOS Enhanced firmware using Main Mode with the SonicWall appliances (Site A) and Fortinet Firewall (Site B) must have routable Static WAN IP address.

Copy URL The link has been copied to clipboard.

Fortigate ipsec vpn site to site