The modus operandi of the network settings IPsec VPN Between the two branches using FortiGate Firewall?

frist

to Configuring the Branch IPsec VPN branch1 and branch 2 settingsGo to VPN > IPsec > Auto Key (IKE).

Select Create branch 1. Set IP Address tothe IP of the HQ FortiGate, Local Interaceto the Internet-facing interface, and enterthe same Pre-shared Key used in the HQbranch 1.

Select Create branch 2, set it to use thenew branch 1, and expand the Advancedoptions.Specify Source address as the Branchsubnet and Destination address as the HQsubnet.

second

Adding Branch addressesfor the local and remoteLAN on the HQ FortiGateunitGo to Firewall Objects > Address >Address.Create a local address. Set Type to Subnet,Subnet/IP Range to the Branch subnet,and Interface to an internal port.

Create a remote LAN address. Set Typeto Subnet, Subnet/IP Range to the HQsubnet, and Interface to the Internet-facinginterface.

thierd

Creating a Branch IPsecsecurity policyGo to Policy > Policy > Policy.Create a new policy. Set Type to VPN andSubtype to IPsec. Configure the policy toallow traffic from the local interface to passthrough the outgoing VPN interface (in theexample, wan1) using the VPN tunnel createdin branch 1.

last

Go to VPN > Monitor > IPSec Monitor toverify the status of the VPN tunnel. It shouldbe up.

A user on either of the office networks shouldbe able to connect to any address on theother office network transparently.From the HQ FortiGate unit go to Log &Report > Traffic Log > Forward Traffic.

From the Branch FortiGate unit go to Log &Report > Traffic Log > Forward Traffic.

i hope to understand my explain