Skip to main content
galal2010
New Member
Jun 17, 2023 11:19 PM UTC
Question

VPN Down

gateway
name: 'Egy-Saudi-VPN'
local-gateway: 41.178.109.139:0 (static)
remote-gateway: 176.44.67.135:0 (static)
dpd-link: off
mode: ike-v1
interface: 'wan1' (5) vrf:0
rx packets: 0 bytes: 0 errors: 0
tx packets: 0 bytes: 0 errors: 1

 

 

Site to site vpn tunnel is down

here is tunnel detail s for Fortigate

get vpn ipsec tunnel details

i see that fortigate doesnot do encapsulation on port 4500 (local-gateway: 41.178.109.139:0 (static))

 

two firewalls connected to ADSL router one is static IP and the other use DDNS

i think there is problem of port fowarding

any help

 

 

2 replies

srajeswaran
Staff
Staff
Jun 18, 2023 5:39 AM UTC

Was this tunnel working earlier? Can you share the outputs suggested in below article.

 

https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-IPsec-VPNs-tunnels/ta-p/195955

 

 

kvimaladevi
Staff
Staff
Jun 18, 2023 11:18 AM UTC

Hi @galal2010,

 

I hope you have enabled Nat T on both the ends? 

Please get the below logs by bringing up the tunnel to check where exactly the issue is

# diagnose vpn ike log-filter dst-addr4 x.x.x.x --->replace x.x.x.x with the public IP of the remote site
# diagnose debug application ike -1
# diagnose debug enable

Regards,

Vimala

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT