Skip to main content
robertwb2
New Member
October 16, 2017
Question

IPSec Tunnel Interface Link showing down, but its working.

  • October 16, 2017
  • 6 replies
  • 29924 views

I recently updated my Fortigate 100D devices to 5.6.2

 

I have 3 sites, each with a Fortigate 100D and each with a IPSec Tunnel to the other 2 locations.

 

All traffic is traversing normally, however when I look at Network->Interfaces, one locations Tunnel Interface Link Status is showing down.

 

So, when I am on Site 1's Interface Link Status, it is showing as DOWN to Site 3, Same with Site 2 to Site 3. And from Site 3, its showing DOWN to Site 1 & 2. 

 

Now when I look at VPN->IPSec Tunnels all statuses are showing as UP.

 

The only reason I'm asking this is because when I'm looking at my IPV4 policies, I'm getting a warning to those polices dealing with Site 3 and so on. 

 

I've check all Phase 1 & Phase 2 settings, everything is perfect there. As I mentioned, all traffic is working perfectly, I just want to make sure that all errors are cleared up. Thanks so much!!

    6 replies

    emnoc
    New Member
    October 16, 2017

    Please review  diag cmds

     

     

    diag vpn ike  gateway

    diag vpn tunnel list

     

     

    What does these  output shows?

     

    Ken

    robertwb2
    robertwb2Author
    New Member
    October 16, 2017

    So when I run those Diag cmds, I'm not seeing any errors. I can sure post those here or send them along to you if you would like to see them but everything looks good with no flags that I can see anyway.

     

    This issue is odd, just because its dealing with everything at my "Site 3". I'm seeing the exact same things in all 3 of my FortiGates in Network->Interfaces and VPN->IPSec Tunnels. Down to Site 3 in Interfaces, but UP in IPSec Tunnels.

     

    Thanks again!

    robertwb2
    robertwb2Author
    New Member
    October 18, 2017

    So should I submit a bug report for this?? I'm not sure what I can do next. Thanks again.

     

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT