Skip to main content
tomgiet
New Member
February 7, 2018
Question

Unable to establish the VPN connection. The VPN server may be unreachable (-20101)

  • February 7, 2018
  • 6 replies
  • 86456 views

Forticlinet try to connect. At 91% get error:

"Unable to establish the VPN connection. The VPN server may be unreachable (-20101)"

 

Windows 10: up to date

 

Forti version: 5.6.5.1150

Reinstalled

Firewall and other chacked/disabled

TLS in Internet Explorer Settings ok

 

Other units form the same net works fine. There is no information about -20101 error in the net.

6 replies

Toshi_Esumi
SuperUser
SuperUser
February 7, 2018

Is this Win10 app version or FortiClient for Windows version? If the former, try uninstall it then install the latter and try. Behaviors might be different from the app version. And more importantly this one has a feature to take debug log, which you probably need to if even this version doesn't work.

But it seems to be very specific to your Win10, assuming some of working ones are Win10 as well.

tomgiet
tomgietAuthor
New Member
February 8, 2018

It is 'standalone' version installer. I have also other problems after last week Windows update, so I decided to reinstall the system. I'll post results.

Toshi_Esumi
SuperUser
SuperUser
February 8, 2018

Then you can run local logging at debug level. That would tell you what it was expecting when it failed.

By the way, when Win updates happen, we sometimes need to reboot the machine twice to complete update process before FortiClient can bring up the connection fully. But those cases, it gets stuck at 98% instead. So I thought your case was different.

praveenke
New Member
October 28, 2019

Looks like a kind of windows memory management issue. Following is the details of steps I usually do to get rid of this issue.

1. Restart FortiSSLVPN demon (Services.MSC)

2. Restart FortiSSLVPN Client

 

The root reason I think, windows client machine used continuously for many days with out restart/shutdown OR machine hibernated/resume for many number of times.

tioeudes
New Member
October 28, 2019

Hello tomgiet

 

Can you post the output of the command "diag debug application sslvpn -1"  ?

 

1 - run:

diag debug application sslvpn -1

diag debug enable

 

2 - try to connect;

 

best regards,

tioeudes

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!