FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
darisandy
Staff
Staff
Article Id 247630
Description This article describes how to solve the IPSec negotiation issue between Fortigate and WatchGuard.
Scope FortiGate, WatchGuard.
Solution

If FortiGate is behind the NAT device, it needs to be tweaked on IPSec setting if trying to connect with WatchGuard.

 

The WatchGuard device will have the error 'Received ID did not match the configured remote gateway endpoint'.

 

config vpn ipsec phase1-interface
    edit <tunnel name>
        set local-gw <private IP address of FGT>
        set localid-type address

        set localid <public IP address of FGT>

    next
end

 

 

On Watchguard, under the Remote Gateway section, there is this setting to enter the public IP address of FortiGate:

'Specify the gateway ID for tunnel Authentication'.