FortiWalkthrough - IKEv2 Native VPN Clients with Certificates and FortiGate

In this video, we review how to use the native OSX and Windows IKEv2 VPN clients to establish remote access VPN connections with FortiGate using certificates and EAP-TLS via Microsoft NPS. While we do encourage usage of FortiClient for IPSec and SSLVPN (which has central management, amongst other advantages), we often get requests for network VPN configurations that do not require any software installation whatsoever. This walkthrough provides just that!

RADIUS VSAs:
https://kb.fortinet.com/kb/viewConten...


An unrelated example that also shows NPS configuration for the VSAs:
https://kb.fortinet.com/kb/viewConten...


IPSec configuration (phase1 and 2):
https://pastebin.com/raw/630VYZEz


This configuration was done on FortiOS 6.2.3, on a FortiGate 501E.
RADIUS server is NPS, running on Windows 2012 R2 Server.


I wrote a cookbook article before on how to configure FortiClient SSLVPN in a similar but less complex manner due to not depending on NPS. The process remains the same in modern versions:
https://docs.fortinet.com/document/fo...