{"id":2806,"date":"2024-02-06T10:16:57","date_gmt":"2024-02-06T15:16:57","guid":{"rendered":"https:\/\/increasec.com\/?p=2806"},"modified":"2024-02-06T10:35:37","modified_gmt":"2024-02-06T15:35:37","slug":"fortigate-to-unifi-vpn","status":"publish","type":"post","link":"https:\/\/increasec.com\/?p=2806","title":{"rendered":"Fortigate to Unifi VPN"},"content":{"rendered":"\n<p>This was shockingly easy<\/p>\n\n\n\n<p><br>I removed all the phase 1 encryption methods that weren&#8217;t being used and any DH group that didn&#8217;t match the Unifi<\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"633\" height=\"648\" src=\"https:\/\/increasec.com\/wp-content\/uploads\/2024\/02\/image.png\" alt=\"\" class=\"wp-image-2807\" style=\"width:523px;height:auto\" srcset=\"https:\/\/increasec.com\/wp-content\/uploads\/2024\/02\/image.png 633w, https:\/\/increasec.com\/wp-content\/uploads\/2024\/02\/image-293x300.png 293w\" sizes=\"auto, (max-width: 633px) 100vw, 633px\" \/><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>The Phase 2 proposal was similarly trimmed down to only what matched the Unifi.  Replay detection doesn&#8217;t seem to matter so leave that on.<br><\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"577\" height=\"593\" src=\"https:\/\/increasec.com\/wp-content\/uploads\/2024\/02\/image-2.png\" alt=\"\" class=\"wp-image-2809\" style=\"width:411px;height:auto\" srcset=\"https:\/\/increasec.com\/wp-content\/uploads\/2024\/02\/image-2.png 577w, https:\/\/increasec.com\/wp-content\/uploads\/2024\/02\/image-2-292x300.png 292w\" sizes=\"auto, (max-width: 577px) 100vw, 577px\" \/><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<p><\/p>\n\n\n\n<p>In Unifi Network 8.0.26, Settings, VPN, Site to site VPN<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"234\" src=\"https:\/\/increasec.com\/wp-content\/uploads\/2024\/02\/image-4-1024x234.png\" alt=\"\" class=\"wp-image-2811\" srcset=\"https:\/\/increasec.com\/wp-content\/uploads\/2024\/02\/image-4-1024x234.png 1024w, https:\/\/increasec.com\/wp-content\/uploads\/2024\/02\/image-4-300x69.png 300w, https:\/\/increasec.com\/wp-content\/uploads\/2024\/02\/image-4-768x176.png 768w, https:\/\/increasec.com\/wp-content\/uploads\/2024\/02\/image-4.png 1054w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"422\" height=\"825\" src=\"https:\/\/increasec.com\/wp-content\/uploads\/2024\/02\/image-6.png\" alt=\"\" class=\"wp-image-2818\" srcset=\"https:\/\/increasec.com\/wp-content\/uploads\/2024\/02\/image-6.png 422w, https:\/\/increasec.com\/wp-content\/uploads\/2024\/02\/image-6-153x300.png 153w\" sizes=\"auto, (max-width: 422px) 100vw, 422px\" \/><\/figure>\n\n\n\n<p>The Advanced section on Unifi doesn&#8217;t need to be set to Manual, i just wanted the IKE and ESP settings to show as we are matching those on the Fortigate.<\/p>\n\n\n\n<p>My only concern here is the Unifi uses AES-128 because it doesn&#8217;t have a very powerful CPU.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>This was shockingly easy I removed all the phase 1 encryption methods that weren&#8217;t being used and any DH group that didn&#8217;t match the Unifi The Phase 2 proposal was&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[87,86],"class_list":["post-2806","post","type-post","status-publish","format-standard","hentry","category-uncategorised","tag-fortigate","tag-fortinet"],"_links":{"self":[{"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/posts\/2806","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/increasec.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2806"}],"version-history":[{"count":4,"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/posts\/2806\/revisions"}],"predecessor-version":[{"id":2819,"href":"https:\/\/increasec.com\/index.php?rest_route=\/wp\/v2\/posts\/2806\/revisions\/2819"}],"wp:attachment":[{"href":"https:\/\/increasec.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2806"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/increasec.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2806"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/increasec.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2806"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}