Skip to main content
username
New Member
March 28, 2018
Question

Apparent IKED issues.

  • March 28, 2018
  • 2 replies
  • 6064 views

We are having issues bringing up a VPN from a Cisco device to a Fortigate 300C.  We have the tunnel set up fine to one Fortigate, but it is not working to the other.

 

We are getting IKE messages from the Cisco device, but the Fortigate is not responding.  When looking at the output of `get system performance top`, the PID changes constantly and was up in the 6000's last night.  It seems to me that it keeps crashing.  

 

Has anybody experienced this, and/or does anyone know of a fix?  Both firewalls are on the same firmware.

    2 replies

    username
    usernameAuthor
    New Member
    March 29, 2018

    Nobody?

    ede_pfau
    SuperUser
    SuperUser
    March 29, 2018

    well, what does the crashlog say ? 'diag deb cr r'

    Same firmware they might be on. Which is?

    ericli_FTNT
    Staff
    Staff
    March 29, 2018

    username wrote:

    We are having issues bringing up a VPN from a Cisco device to a Fortigate 300C.  We have the tunnel set up fine to one Fortigate, but it is not working to the other.

     

    We are getting IKE messages from the Cisco device, but the Fortigate is not responding.  When looking at the output of `get system performance top`, the PID changes constantly and was up in the 6000's last night.  It seems to me that it keeps crashing.  

     

    Has anybody experienced this, and/or does anyone know of a fix?  Both firewalls are on the same firmware.

    Hi there, thanks for reporting!

     

    Please list or attach the output of these two commands:

    get sys status

    diag debug crash read

     

    Thanks!

    emnoc
    New Member
    March 29, 2018

    I would at a few  basics, like the tunnel-group  authen ( PSK  or CERT ) and the version ike1/2 . If in PH1 one side does not respond it's a good indication the   peer-id is not matching

     

    ken