Technical Tip: IPSec tunnel between FortiGate and ...

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 247630

Description

This article describes how to solve the IPSec negotiation issue between Fortigate and WatchGuard.

Scope

FortiGate, WatchGuard.

Solution

If FortiGate is behind the NAT device, it needs to be tweaked on IPSec setting if trying to connect with WatchGuard.

The WatchGuard device will have the error 'Received ID did not match the configured remote gateway endpoint'.

config vpn ipsec phase1-interface
edit <tunnel name>
set local-gw <private IP address of FGT>
set localid-type address

set localid <public IP address of FGT>

next
end

On Watchguard, under the Remote Gateway section, there is this setting to enter the public IP address of FortiGate:

'Specify the gateway ID for tunnel Authentication'.

3570

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Technical Tip: IPSec tunnel between FortiGate and WatchGuard, error 'Received ID did not match the configured remote gateway endpoint'

You are leaving our website