Skip to main content
renecarrillo
New Member
December 17, 2015
Question

IPSEC SITE 2 SITE VPN TO AZURE FAILURE

  • December 17, 2015
  • 5 replies
  • 13514 views

Hello,

 

I have a 60D and trying to make a VPN to AZURE with no success, I have used the official document from Fortigate Cookbook with no success...

 

Taking a look at the logs I can see a failure in phase 1

user="N/A" group="N/A" xauthuser="N/A" xauthgroup="N/A" assignip=N/A vpntunnel="N/A" status=negotiate_error reason="peer SA proposal not match local policy"

 

Do any of you have an idea of which are the right parameters for SA?

 

On the Azure compatibility lists says FortiOS is supported and I followed the Fortinet guideline step by step but nothing...

 

Thanks in advance

 

5 replies

buntha
New Member
December 18, 2015

Hi !!!

In vpn site 2 site there are 2 phase for configuration:

Phase1:

IKE version

Pre-sharekey

WAN connection is ok on both site

DHGroup =2 or ?

Encryption= sha1 or md5 or ..... etc

enabled IKE interface in your FGT.

Phase2:

Remote network

Local network

Encryption 3Des sha

Auto Negotiation and keep alive time

Route 

 

I seem you said above your are wrong configuration in phase 1 so please check pre-sharekey and or DHGroup between both site. 

renecarrillo
New Member
December 18, 2015

Hi,

 

I know about that all, my problem is that I don't have the remote side parameters... They are using Microsoft Azure service, I found a document in the Fortinet site with all that parameters so I followed it and configure the site 2 site vpn according to that document but it didn't work maybe they are wrong, what I'm looking for is if anybody knows the right parameters so i can configure the Fortigate 2 Azure VPN

 

 

ThomasDK
New Member
December 27, 2016

I to have issues with this. Did you ever get it fixed?

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!