Skip to main content
Nemat
Explorer
May 26, 2022
Question

VPN Site to Site tunnel doesn't come up by normal Bring up.

  • May 26, 2022
  • 3 replies
  • 2836 views

Dears,

Good Morning, Evening, Afternoon. 

we have vpn site to site when it goes down [phase1 & phase2] and we try to ping it up it doesn't goes up until we issue these commands,

 

"diagnose vpn ike restart"

"diagnose vpn ike gateway clear"

 

we phase this behavior in only this vpn other site2site can be bring up normally.

and we do set Auto-negotiate on it.

 

 

3 replies

AlexC-FTNT
Staff
Staff
May 26, 2022
seshuganesh
Staff
Staff
May 26, 2022

For bringing IPSEC tunnel, you can follow this article:

https://docs.fortinet.com/document/fortigate/6.4.5/administration-guide/221346/ipsec-monitor#:~:text=dial%2Dup%20users.-,To%20view%20the%20IPSEC%20monitor%20in%20the%20GUI%3A,click%20Expand%20to%20Full%20Screen.

 

If its still not coming up please collect below logs

diag vpn ike log-filter dst-addr4 a.b.c.d (where a.b.c.d is the remote gateway ip)

diag debug application ike -1

diag debug enable

 

Please collect the below logs and share it with us

Nemat
NematAuthor
Explorer
May 29, 2022

Dears,

 

Thanks for replay, I really appreciate it.
the vpn is working find right now the problem appears when it goes done.
I will share the logs as soon as it goes done, its a production environment and I can not do that deliberately.

Thanks a gain.  

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.