IPSEC with Ubuntu and Networkmanager; does not work, some policy issue
Hello :)
i've configured the vpn and Client like this: http://www.justdailynotes.com/fortinet/linux/2015/02/14/Fortigate-IPSec-Linux-NetworkManager/
So i have newest Version of Fortigateversion: v5.2.4,build688 (GA)
When i test connecton from Networkmanger i see this in the Logs from the Fortigate:
negotiate_error
Reasonpeer SA proposal not match local policy
So what i've done wrong. Yes i know the Howto is not actually, but should work. Here my settings:
config vpn ipsec phase1-interface
edit "IPSecClient"
set type dynamic
set interface "wan"
set mode-cfg enable
set ipv4-dns-server1 8.8.8.8
set proposal aes256-md5 aes256-sha1
set comments "VPN: IPSecClient (Created by VPN wizard)"
set dhgrp 2
set xauthtype auto
set authusrgrp "sslvpn"
set ipv4-start-ip 10.212.135.220
set ipv4-end-ip 10.212.135.240
set ipv4-netmask 255.255.255.0
set ipv4-split-include "intern"
set psksecret ENC 9KQnWKm4fcU1dVdTyDwy0rLs2Pn7r6GQMZjWK/IycYX573gyGw+F4C0Xy7KjuM5lcjx3qQUqmTtLa9daJ+niq24LEI1HG1/qdmVZpP4t0+7yFGW1AYcWstIqyNxzApOmg04IMjMxj4caQHgdy8PjVbO6rPb8kvyKefthZ2/lxeEO5QtUpLEm3i1CWdAMOHODxvn9HQ==
next
end
config vpn ipsec phase2-interface
edit "IPSecClient"
set phase1name "IPSecClient"
set proposal aes256-md5 aes256-sha1
set pfs disable
set keepalive enable
set comments "VPN: IPSecClient (Created by VPN wizard)"
next
end
edit 6
set uuid 8d88481e-63cf-51e5-fc4a-7d06221335f3
set srcintf "IPSecClient"
set dstintf "lan"
set srcaddr "IPSecClient_range"
set dstaddr "all"
set action accept
set schedule "always"
set service "ALL"
next
Thank a lot for help
best regards
