Skip to main content
iasupport
iasupport
New Member
October 22, 2025
Solved

can't establish VPN between two Fortigates

  • October 22, 2025
  • 1 reply
  • 257 views

Hi all, I'm having trouble getting 2 fortigate firewalls to connect via VPN, it looks like the phase1 is up but the phase2 never gets triggered. Even if I execute a ping between the two sides it never comes up. I've attached a screenshot of the VPN settings at both ends as well as the static routes and the firewall rules that I've got configured.

 

I've tried running the Fortigate to Fortigate IPSEC wizard and I get the same result. I currently have NAT disabled at both ends but I've tried it with it enabled and enabled/disabled at both ends. I've checked and the preshared keys are the same and they're both using AES256-SHA256 DH14 on both the phase1 and phase2s

 

I'm really confused, can anyone offer any advice?

 

 

mal2nor.pngnor2mal.pngmal2nor-firewallrules.pngmal2nor-staticroute.pngnor2mal-firewallrules.pngnor2mal-staticroute.png

Best answer by iasupport

Hi all, ignore this. I've just gone through it again this morning (after hours last night) and realised I was setting both ends up to dial out. Now I've changed it and everything has come up.

It's amazing what some sleep and fresh eyes will do. I'll leave this here in case it helps anyone else.

1 reply

iasupport
iasupportAuthorAnswer
New Member
October 22, 2025

Hi all, ignore this. I've just gone through it again this morning (after hours last night) and realised I was setting both ends up to dial out. Now I've changed it and everything has come up.

It's amazing what some sleep and fresh eyes will do. I'll leave this here in case it helps anyone else.

    Terms & ConditionsAccessibility statement