VXLAN over IPSec is a technology that provides an L2-encrypted pipe (overlay) between two firewalls. This video is a comprehensive guide on how to configure VXLAN over IPSec on Fortinet firewalls, including troubleshooting, performance testing some unexpected issues you could face. Complexity: medium Prerequisites: Should be familiar with overlay network concepts and IPSec configuration. No actual VXLAN experience is needed (but it is a plus) Tested in: FortiGate OS versions: from to Contents: 00:00 Intro 00:41 What is VXLAN over IPsec 00:55 Use cases 01:49 Limitations 02:27 How it works 03:15 Configuration that doesn’t work 03:45 Configuration that works 10:38 Performance tests 11:57 Multicast 13:39 Troubleshooting 15:47 MTU 17:08 A couple of moments more to be aware of