FortiGate - SonicWall VPN Issue

Question

Hi.

First time post here so bare with me.

I have access to a FortiGate 1500D box and have created a IPsec VPN to a SonicWALL at another location. All settings match on both ends but the VPN will not connect. Looking at the logs on the FortiGate show the errors below.

The failure shows on the inbound Phase2.

Can anyone help. I appreciate you probably need more information so please ask what is required.

#1ActionnegotiateAssigned IPN/ACookiesefbcdbcc3c9326f0/619c4b4fc1656f87Date/Time14:43:15DirectioninboundGroupN/AIPsec Local IP85.92.188.50IPsec Remote IP217.155.7.70InitiatorremoteLevel Local Port500Log DescriptionProgress IPsec phase 2Log ID37130Messageprogress IPsec phase 2ModequickOutgoing Interfacevlan3670.wanRemote Port500ResultERRORRoleresponderStage1Statusfailure

114:41:53 negotiatefailureprogress IPsec phase 2 214:41:44 negotiatefailureprogress IPsec phase 2 314:41:43 negotiatesuccessprogress IPsec phase 2 414:41:40 negotiatefailureprogress IPsec phase 2 514:41:40 negotiatesuccessprogress IPsec phase 1 614:41:40 negotiatesuccessprogress IPsec phase 1 714:41:40 negotiatesuccessprogress IPsec phase 1 814:41:40 negotiatesuccess

progress IPsec phase 1

Toshi_Esumi · Answer

Likely traffic selectors in phase2 are not matching. Are you setting specific network combinations, or using the default 0/0<->0/0 on both ends? In either case, you should run IKE debugging at least on the FG side to see exactly what failed. I would assume SonicWall has similar debugging capability.

diag vpn ike log-filter dst-addr4 <SonicWall_IP>

diag debug app ike -1

diag debug ena

Sign up

Login with SSO

Login to the community

Login with SSO