MX to Fortigate Site to site VPN help needed

[RYN0]

Is there anyone with experience setting up site to site VPN links between an MX and a Fortigate? I am familiar with and have used the guidelines in Meraki's KB dealing with 3rd party VPNs. I am having no luck at all still. Any insight would be much appreciated. Thanks.

[MarcP]

Hi @RYN0 

we use it for alle our  sites.

On fortinet-site it is configures as Dial-Up IPSec

an here the config of the MX´s, 

[RYN0]

I know how to set it up on the MX end. I just cannot get just right on the fortinet end.

I setup a custom IPSec VPN policy on the fortigate with matching phase 1 and 2 proposals. not sure what else is needed on the fortigate end to make it play nice.

[CptnCrnch]

Let me get this straight: you‘re asking for help to configure a Fortinet VPN in a Meraki forum? 🤭

[RYN0]

Hi CptnCrnch

I am asking if anyone here is familiar with making a Fortigate work with a Meraki MX to get a stable VPN tunnel going and how they did it.

If I need snide remarks in the future, I will be sure to go to you first. If you cannot contribute, there is not point in replying to this thread and wasting other people's time with your useless comments.

Have a nice day!

[JAIROJASH]

HI, did you manage to get the connections between Meraki and Fortinet working?
If you managed to do it, can you tell me how you configured it on each side and what policy you created in the firewall?
Thanks for your help.

[Phanto]

 Hi MarcP

in this case (Non Meraki VPN Peer) the MX needs to be on "Hub Mode" ?

[Phanto]

Hi MarcP



in this case (Non Meraki VPN Peer) the MX needs to be on "Hub Mode" ?

[MarcP]

Depends....

We use different organizations, in one wach of the MXs is a Hub (No autoVPN possible)

In another org we use a MX250 as a Hub and all MX 65 as spokes (but all die their own ipsec tunnel to the fortigate peer)

All designed as mentioned from the Meraki SE recommendation