delete_phase1_sa Error

5 replies
27066 views

Can anyone explain this error to me and how I can get rid of it. It comes up in the event log of the Fortigate-200 v2.8 when I try to make a vpn connection delete_phase1_sa Thanks

A

Anonymous_UserAuthor

Esteemed Contributor III

the phase1 will be deleted on phase2 failure..

A

Anonymous_UserAuthor

Esteemed Contributor III

Thanks for the reply... but can you please explain it to me in more detail and maybe suggest a fix. Thanks

A

Anonymous_UserAuthor

Esteemed Contributor III

Hi i can say you what you can review: -check that the proposal (encryption, lifetime, dh group) for the IKE 2nd phase match each other and try to switch off any keepalives/pings or dead peer detection on the Fortinet for both IKE modes. -check the IP settings (remote lan, local lan), they also affect the 2nd phase SA and must correspond to the Fortinet settings/selectors. try to enable some debugging on the fortinet: diag debug ena; diag debug application ike 2 or try to sniff some packet diag sniffer packet wanX ' proto 50 || port 500' bye

A

Anonymous_UserAuthor

Esteemed Contributor III

Thank you for the help.