Repeat the previous step to create another tunnel for another subnet.This IP address is the internal network that the VPN protects. In the Network IP text box, type the remote IP segment.In the Remote IP section, from the Choose Type drop-down list, select Network IPv4.In the Network IP text box, type the local IP segment.In the Local IP section, from the Choose Type drop-down list, select Network IPv4.From the Gateway drop-down list, select gateway.1.Keep all other Phase 1 settings as the default values.From the Version drop-down list, select IKEv2.In the Gateway Endpoint section, select the Start Phase 1 tunnel when Firebox starts check box.Keep the default settings for all other options.In the adjacent text box, type the IP address of your Fortinet WAN connection.In the adjacent text box, type the primary IP address of the External Firebox interface.The Primary Interface IP Address is the primary IP address you configured on the selected external interface.

From the Interface IP Address drop-down list, select Primary Interface IPv4 Address.From the External Interface drop-down list, select External.The Gateway Endpoint Settings dialogue box opens. In the Gateway Endpoint section, click Add.In the adjacent text box, type the pre-shared key.In the Credential Method section, select Use Pre-Shared Key.From the Address Family drop-down list, select IPv4 Addresses.In the Gateway Name text box, type a name to identify this Branch Office VPN gateway.The Branch Office VPN configuration page opens. On the Firebox, configure a BOVPN connection: This diagram shows the topology for a BOVPN connection between a Firebox and a Fortinet FortiGate 60E. The hardware and software used in this guide include:

Fortigate ipsec vpn