Fortigate VM IPSEC ISSUE

Forum|Forum|1 year ago
November 26, 2024
3 replies
2513 views

Hello All,

Hope you are all doing well, I'm facing an issue today while working on IPSEC on Fortigate VM,

When I try to create a IPSec VPN tunnel using the wizard this error show up " 61: Input not as expected." as a workaround I create it mannuly to avoid this error but on the Phase2 of VPN Tunnel the fortigate keep loading with out saving the configuration ( screen attached )

+The OS info : v7.6.0 build3401

+ Config : 2CPU, 2GB RAM

Do you have any recommandation on that ?

Regards,

Karim

jo_rang

Staff

Hi,

Try to create the VPN via CLI:

Phase 1:

config vpn ipsec phase1-interface

edit "IPSEC"
set interface "wan1"
set peertype any
set net-device disable
set proposal aes128-sha256 aes256-sha256 aes128-sha1 aes256-sha1
set remote-gw 10.9.10.27
set psksecret **********
next
end

Phase2

config vpn ipsec phase2-interface

edit "IPSEC"
set phase1name "10.9.10.27"
set proposal aes128-sha1 aes256-sha1 aes128-sha256 aes256-sha256 aes128gcm aes256gcm chacha20poly1305
set src-addr-type name
set dst-addr-type name
set src-name "IPSEC_local"
set dst-name "IPSEC_remote"
next
end

Karim_namatAuthor

Explorer

Hi @jo_rang

If you setup it via CLI as a custom via GUI it will work but no logs will be shown on implicit deny for troubleshoot purpose unfortunately.