Skip to main content
Deftone
New Member
Dec 8, 2021 10:00 AM UTC
Solved

IPSec native win client

Hi,

 

I just upgraded my 100E to 7.0.3 OS release.

 

What I see is that the dial up IPSec created with wizard for native win client doesnt work anymore?

I can connect but can not reach anything on the other side.

 

When I roll back to 6.4.8 everything is working fine again.

Any idea what has changed and how to resolve it? I have all policies set

Esteemed Contributor III
Dec 31, 2021 8:46 PM UTC

Hello,

 

It is not clear from your notes if you are using IKEv1 or IKEv2 with the Windows Native Client. But, I am assuming you are using L2TP over IPSec (which uses IKEv1) and that needs some manual configuration change as mentioned in the below document after upgrading device to FortiOS 7.0.3 

 

https://docs.fortinet.com/document/fortigate/7.0.3/fortios-release-notes/927994/l2tp-over-ipsec-configuration-needs-to-be-manually-updated-after-upgrading-from-6-4-x-or-7-0-0-to-7-0-1

 

 

3 replies

Esteemed Contributor III
Dec 31, 2021 8:46 PM UTC

Hello,

 

It is not clear from your notes if you are using IKEv1 or IKEv2 with the Windows Native Client. But, I am assuming you are using L2TP over IPSec (which uses IKEv1) and that needs some manual configuration change as mentioned in the below document after upgrading device to FortiOS 7.0.3 

 

https://docs.fortinet.com/document/fortigate/7.0.3/fortios-release-notes/927994/l2tp-over-ipsec-configuration-needs-to-be-manually-updated-after-upgrading-from-6-4-x-or-7-0-0-to-7-0-1

 

 

Deftone
DeftoneAuthor
New Member
Jan 1, 2022 10:18 AM UTC

Thanks that helpded a lot.

I had policy's set from wrong source interface 

Esteemed Contributor III
Jan 3, 2022 5:08 PM UTC

You're welcome

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT