Free tool · No upload · No sign-up

FortiGate VPN Config Generator

Generate clean, route-based IPsec configuration for FortiGate ↔ FortiGate, FortiGate ↔ Azure VPN Gateway and FortiGate ↔ AWS Site-to-Site VPN — phase 1/2, tunnel interfaces, addresses, policies and routing, with verification commands. Everything is generated in your browser; nothing you type is sent anywhere.

Feedback

Topology & platform

FGT ↔ FGT FGT ↔ Azure FGT ↔ AWS

FortiOS version IKE version

Cryptography

Proposal DH group Pre-shared key

Phase 2 uses the same proposal. Lifetimes and PFS follow each peer's recommended values automatically (shown in the output).

This FortiGate (Side A)

Site name (tunnel name derives from peer) WAN interface

Public IP LAN interface (policy srcintf)

Local subnets (one per line, CIDR)

Remote FortiGate (Side B)

Site name WAN interface

Public IP LAN interface

Remote subnets (one per line, CIDR) Tunnel transfer network (/30, side A gets .1)

Related IPWOX tools: FortiGate Debug Flow Decoder · Password Generator · Firewall Policy Auditor — all free, all run in your browser. See all tools.