LT2TP/IPSec vpn does not work

Forum|Forum|10 years ago
December 17, 2015
2 replies
7073 views

Hi,

I have problem with Fortigate 100D (5.2.4) and lt2tp/ipsec. If I connecting with the computer to a VPN and selected "Microsoft CHAP Version 2 (MS-CHAP v2)", then I get error. With "Unencrypted password (PAP) works perfectly. Why does not work with "Microsoft CHAP Version 2 (MS-CHAP v2)"?

chap.jpg

Best answer by ede_pfau

hi,

you may force the FGT to use MSCHAP by editing the config in the CLI:

config system interface
    edit <interface_name>
        set l2tp-client enable # should already be enabled
        config l2tp-client-settings
            set auth-type {auto | chap | mschapv1 | mschapv2 | pap}
        end
    end
end

The default is "auto" which may not work for your configuration.

ede_pfauAnswer

SuperUser

hi,

you may force the FGT to use MSCHAP by editing the config in the CLI:

config system interface
    edit <interface_name>
        set l2tp-client enable # should already be enabled
        config l2tp-client-settings
            set auth-type {auto | chap | mschapv1 | mschapv2 | pap}
        end
    end
end

The default is "auto" which may not work for your configuration.