Skip to content
KnowledgeBase
Infra
Security
VPN
Site to site VPN
Unifi USG and FortiGate site to site VPN tunnel configuration guide

Unifi USG and FortiGate site to site VPN tunnel configuration guide

Introduction

This doc will guide you to build a site to site VPN tunnel, between a Unifi Gateway (USG) and a Fortigate firewall. Both devices will have public IP addresses, and we will use PSK, and static routes for phase 2.

USG config

UniFi USG site-to-site VPN settings, part 1 UniFi USG site-to-site VPN settings, part 2

Fortigate config

Tunnel config

Network: FortiGate VPN tunnel: network settings Authentication: FortiGate VPN tunnel: authentication settings Tunnel Phase1: FortiGate VPN tunnel: phase 1 settings Tunnel Xauth: FortiGate VPN tunnel: XAUTH settings Tunnel Phase2: FortiGate VPN tunnel: phase 2 settings

Policy Config

FortiGate firewall policy for the tunnel

Static routes

FortiGate static route to the remote subnet

Last updated on