Fortigate Site 2 Site Ipsec vpn confiuration with Cisco router - don't waste time if you are using trail license

Dear All,

I had to configure Site 2 site IPsec tunnel with cisco router with using OSPF protocol so I thought, First do the lab then implement. 

I was doing lab to configure IPsec tunnel with cisco (CISCO CONFIG (VTI + IPsec + OSPF). but unfortunately Fortigate does not support AES encryption in config phase 1 and 2 setting. on the other side cisco router support AES encryption does not support legacy encryption like DES.

Fortigate proposal setting - 

BR1-FW1 (phase2-interface) # edit BR12BR1

BR1-FW1 (BR12BR1) # set proposal
null-md5       null-md5
null-sha1      null-sha1
null-sha256    null-sha256
null-sha384    null-sha384
null-sha512    null-sha512
des-null       des-null
des-md5        des-md5
des-sha1       des-sha1
des-sha256     des-sha256
des-sha384     des-sha384
des-sha512     des-sha512

BR1-FW1 (BR12BR1) # set proposal
exit
cisco router phase 2 proposal  ( cisco router setting)
BR2(config)#crypto ipsec transform-set MY_TRANSFORM_SET ?
  ah-md5-hmac      AH-HMAC-MD5 transform
  ah-sha-hmac      AH-HMAC-SHA transform
  ah-sha256-hmac   AH-HMAC-SHA256 transform
  ah-sha384-hmac   AH-HMAC-SHA384 transform
  ah-sha512-hmac   AH-HMAC-SHA512 transform
  comp-lzs         IP Compression using the LZS compression algorithm
  esp-3des         ESP transform using 3DES(EDE) cipher (168 bits)
  esp-aes          ESP transform using AES cipher
  esp-des          ESP transform using DES cipher (56 bits)
  esp-gcm          ESP transform using GCM cipher
  esp-gmac         ESP transform using GMAC cipher
  esp-md5-hmac     ESP transform using HMAC-MD5 auth
  esp-null         ESP transform w/o cipher
  esp-seal         ESP transform using SEAL cipher (160 bits)
  esp-sha-hmac     ESP transform using HMAC-SHA auth
  esp-sha256-hmac  ESP transform using HMAC-SHA256 auth
  esp-sha384-hmac  ESP transform using HMAC-SHA384 auth
  esp-sha512-hmac  ESP transform using HMAC-SHA512 auth

So, Conclusion if you are using Fortigate trail license like 15 days or permanent license so do not practice.  because FortiGate doesn’t support higher encryption if you are using trail license.

Thank you.