Skip to main content
Veslaone
New Member
February 6, 2012
Question

VPN tunneling shutting down

  • February 6, 2012
  • 3 replies
  • 8963 views
Hi, I have configured a lot of FortiGate VPN tunneling for customers, and today I' m stuck by a VPN tunneling which shutting down 4 or 5 times per day. Everything is good customer can join his second FortiGate by VPN, and sometimes he cant, he call me and I see on the monitor " click to bring up" -_-. I do it, then everything is working, customer can connect again. (first time I see that) Anyone get a solution about this ? PS : Fortigate 50B and I already did : -------------------------- #dia vpn tunnel list If tunnel is not coming up, please connect FGT through any SSH application like Putty and return below commands output when try to bring the tunnel up through the GUI. diag deb dis diag deb reset diag debug enable diag debug console timestamp en diag vpn ike log-filter dst-addr4 <public ip of the vpn peer> diag debug application ike -1 -------------------------- and : #config system global #set phase1-rekey enable -------------------------- Best regards

    3 replies

    Carl_Wallmark
    New Member
    February 6, 2012
    Hi, and welcome, Try this command on the phase-2 config vpn ipsec phase2-interface (if you have interface mode) edit <tunnelname> set auto enable end That command forces the tunnel to stay up as long as they can communicate.
    Veslaone
    VeslaoneAuthor
    New Member
    February 6, 2012
    Thanks, I type these commands, and waiting for a result.
    Veslaone
    VeslaoneAuthor
    New Member
    February 7, 2012
    Thank you very much VPN tunneling was still up this morning, great job.