Not seeing the option configure to AES and sha 256 on FortiGate hub using ADVPN

Forum|Forum|1 year ago
December 23, 2024
8 replies
2782 views

Hello all,

I humbly request your assistant.

I configure the ADVPN on the hub but I would like to configure AES and sha 256 but I am not allowed to configure same .

The screen shot below is only options I am see, not even the option to convert to full configure is displayed.

Screenshot 2024-12-23 082946.png

Thank you

Regards

FortiGate

Best answer by kaman

Hi jomof,

For Hub-and-Spoke template there is no option to edit through GUI.

You can edit from the CLI as below:

config vpn ipsec phase1-interface
edit star_lethem
set proposal aes128-sha256
end

You can use the "?" keyword also after set proposal command to check all the Phase1 proposals.

If you have found a solution, please like and accept it to make it easily accessible to others.

Regards,
Aman

kaman

Staff

Hi @jomof,

You can see the Encryption and Authentication settings under Phase1 Proposal

Also, when users create an IPSec VPN using the VPN Creating Wizard, it is impossible to view the phase 1/phase2 proposals and IKE version in the GUI, select 'Convert To Custom Tunnel' to view and modify the settings in the GUI.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Change-in-default-settings-when-creating-IPSec/ta-p/346695

If you have found a solution, please like and accept it to make it easily accessible to others.

Regards,
Aman