Skip to main content
DVFIT
DVFIT
New Member
July 19, 2018
Question

FortiClient v6.0.0 IPSEC VPN not connecting

  • July 19, 2018
  • 1 reply
  • 5995 views

Our users are sporadically able to connect to VPN. They enter their username and password and click "Connect", then they get the box to enter their 2-factor code. Once they click on "Ok", the boxes get greyed out and there's nothing to do but click "Disconnect", and it just sits there until you click "Disconnect".  We went from v5.6.6 to 6.0.0, deployed from EMS on v6. The vpn config worked on 5.6.6, but we're lucky if 25% of our users can connect now that we've deployed v6.

 

Any ideas?

1 reply

makco10
makco10
Explorer II
October 18, 2018

Hello,

 

In the logs you see anything about this connection?

 

You can debug to obtain more info about:

 

To enable and use IKE real-time debug 

 

1. Create a filter using the following command:

diagnose vpn ike log-filter dst-addr4 <|Psec peer's public IP address>

 

2. Enable the debug using the following commands:

diagnose debug application ike -1
diagnose debug enable

 

3. Try to open the tunnel while the debug is running, and capture all the output

 

4. After you have captured the output, stop the debug using the following commands:

diagnose debug reset 
diagnose debug disable  

 

[style="background-color: #ffff99;"]Keeping a real-time debug running on the background of a FortiGate for a long time is not recommended.[/style]

Terms & ConditionsAccessibility statement