| Description | This article describes how to resolve IPsec dial-up VPN failure due to EMS serial number verification. |
| Scope | FortiOS versions v7.6.x and later. |
| Solution |
In FortiOS 7.6.x, EMS SN verification is enabled by default for remote dial-up IPsec VPN configurations. During VPN connection attempts using FortiClient, the system checks for a valid EMS SN. If the FortiClient being used is a free version or lacks a valid EMS SN, the VPN connection fails (refer to the attached screenshot for details).
FortiClient error message is shown as below:
To resolve this issue and ensure successful VPN connectivity for remote endpoints, disable the EMS SN verification option during IPsec VPN creation using the IPsec VPN Wizard. This can be done by unchecking the 'EMS SN Verification' checkbox in the VPN configuration settings (see the attachment).
From the CLI:
config vpn ipsec phase1-interface
|
