|
An IKE password starting with '0x' is interpreted as HEX to comply with RFC 4306, which requires the ability to define a HEX encoding. So FortiGate regards psksecret starting with '0x' as a hex-encoded value.
For instance, if configuring psksecret with '0x466f7274696e6574', then FortiGate regards it as hex-encoded '466f7274696e6574'.
config vpn ipsec phase1-interface
edit "phase1-interface"
set psksecret 0x466f7274696e6574
next
end
If it is wanted to have a string password start with 0x, then it is necessary to add an extra 0 at the beginning of the string.
For instance, if configuring psksecret with '00x466f7274696e6574', then FortiGate regards it as a string '0x466f7274696e6574', not hex-encoded.
config vpn ipsec phase1-interface
edit "phase1-interface"
set psksecret 00x466f7274696e6574
next
end
Related document:
FortiOS CLI Reference: config vpn ipsec phase1-interface
|
