Skip to main content
Grumman
New Member
August 11, 2015
Solved

IPSec VPN can't create tunnel

  • August 11, 2015
  • 7 replies
  • 21493 views

Hello,

 

I am experiencing an issue when I am trying to create an IPSec VPN tunnel.

I have tried this on both Fortigate 60D and 200D with v5.2.3,build670 (GA) firmware.

 

When trying to create a tunnel using the GUI wizard, at the final step just before creating the tunnel, I receive the error: "Empty Values Not Allowed" and the tunnel is not created.

 

All fields are filled in and I really do not know what the problem is.

I have tried to restart the units as well as to backup the config and restore it to another fortigate unit but I receive the same error...

 

Any help would be much appreciated!

 

Thanasis

    Best answer by Grumman

    Ops_Tech wrote:

    Hi Thanasis, 

    I am having the same issue, did you ever find a resolution?

    Thanks

    Hello,

     

    I found out that if you copy-paste any of the values, it will not work...

    Also, if you have strange characters in the tunnel's password like [^&%")(] the wizard will give you that error as it looks like it brakes the command the FortiGate is running...

     

    Hope this helps.

     

    Regards,

    Thanasis

    7 replies

    ede_pfau
    SuperUser
    SuperUser
    August 11, 2015

    hi,

     

    just try to create the tunnel in CLI (console window or ssh):

    conf vpn ipsec phase1-interface

    edit new_vpn

    ...

    next

    end

    conf vpn ipsec phase2-interface

    edit new_tunnel

    ...

    next

    end

     

    Any existing VPN should give you the idea which parameters are mandatory (interface, proposal,...) and which are not.

    Which kind of tunnel are you going to create: main mode, dynamic or static remote gateway,...?

    Grumman
    GrummanAuthor
    New Member
    August 11, 2015

    Thank you very much for your help!

     

    I created the tunnel through CLI but i do not understand what the issue with the GUI is...

    The tunnel i am trying to create is a static remote gateway.

     

    Thanasis

    ede_pfau
    SuperUser
    SuperUser
    August 11, 2015

    Glad it works for you now.

     

    There's 2 ways to see this:

    1 - you really want to understand why and how

    2 - you need a result

     

    If you want to go way 1, just open the wizard on the newly created tunnel definition and start deleting one value after the other, until the GUI stops you. Even then, sometimes it's a browser issue, or will not happen if the Fortigate is freshly rebooted. Or some of the parameters used have funny characters, or spaces where the GUI won't accept it (but the CLI will).

     

    And somehow you very often go way 2.

    Ops_Tech
    New Member
    July 12, 2016

    Hi Thanasis,

     

    I am having the same issue, did you ever find a resolution?

     

     

    Thanks

    Grumman
    GrummanAuthorAnswer
    New Member
    July 13, 2016

    Ops_Tech wrote:

    Hi Thanasis, 

    I am having the same issue, did you ever find a resolution?

    Thanks

    Hello,

     

    I found out that if you copy-paste any of the values, it will not work...

    Also, if you have strange characters in the tunnel's password like [^&%")(] the wizard will give you that error as it looks like it brakes the command the FortiGate is running...

     

    Hope this helps.

     

    Regards,

    Thanasis

    ianbeyer
    New Member
    November 2, 2017

    Ops_Tech wrote:

     

    I found out that if you copy-paste any of the values, it will not work...

    Also, if you have strange characters in the tunnel's password like [^&%")(] the wizard will give you that error as it looks like it brakes the command the FortiGate is running...

     

    How is it that this glaring bug has STILL not been fixed? 

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.