Technical Tip: Unable to set the ‘client-auto-negotiate’ or ‘save-password’ option needed for Auto Connect to work for Remote Access IPSec

[johnathan]

Description	This article describes how to resolve a scenario where the user is unable to set up Auto Connect for the FortiClient on an IPSec tunnel, as certain options are not available.
Scope	FortiOS 7.x.x.
Solution	For ‘Auto Connect’ to work while using an IPsec tunnel, it could be necessary to set ‘client-auto-negotiate’ and ‘save-password’  to 'enable' under the Phase 1 config of the tunnel.    When making a Remote Access IPsec tunnel using the default template on the FortiGate, it may have the option ‘set unity-support disable’ already set on that tunnel.  If it is desired to enable the ‘Auto Connect’ feature, this is required to be on.  Once this is changed, proceed to configure that option, and ‘Auto Connect’ should work as intended.