Skip to main content
ago_icaar
ago_icaar
New Member
September 16, 2021
Question

Fortigate - Cisco router IKEv2 with set network-id

  • September 16, 2021
  • 1 reply
  • 3391 views

Hi,

 

I need to establish a tunnel with an existing VPN IPSec configuration. The configuration are routed base topology. I have several tunnel between Fortigate and bgp routing, no problem for that. But I need connect Cisco router in ipsec IKEv2. I tested to UP this tunnel in a lab, it's OK, but in my actual config I need use command "set network-id xx".

But for the cisco router, I don't find this attribute in IKEv2 negotiation.

 

Thank you for your help

    1 reply

    vsharma
    Staff
    vsharma
    Staff
    July 18, 2023

    Hello,

     

     

    The network ID is a Fortinet-proprietary attribute that is used to select the correct phase 1 between IPsec peers, so that multiple IKEv2 tunnels can be established between the same local/remote gateway pairs.

    So it may not be available in Cisco.

    Please refer below and see if you have a use case to use network-id.

     

     - https://docs.fortinet.com/document/fortigate/7.4.0/administration-guide/790613/phase-1-configuration

    It's explained under "Additional CLI configurations".

     

    Please upvote and mark as resolved if it helps.

     

    Thanks.

    Terms & ConditionsAccessibility statement