FortiGate

ITC_Techs · ‎03-04-2020

We have an IPsec VPN between FortiGate 60E and SonicWall NSA 2600. The VPN is up and active but no traffic is passing across it.

rwpatterson · ‎03-06-2020

What does your routing table look like?

Fortigate # diagnose ip route list

Blank out any unimportant routes to this thread that you may not want made public.

Bob - self proclaimed posting junkie!
See my Fortigate related scripts at: http://fortigate.camerabob.com

ITC_Techs · ‎03-05-2020

Yes, phase 1 and 2 are up. Already verified that beforehand and verified again

emnoc · ‎03-05-2020

Did you at least do "diag debug flow" ? It will tell you everything that is wrong or what's happening.

You have to help us in order to help you.

Also patterson mention traceroute earlier. I would also add "diag sniffer packet" and select the tunnel interface name that you use in phase1 and witness the traceroute enter/exit the tunnel

That would confirm traffic in the tunnel assuming a route-based and you run traceroutes from A and Z sides.

http://socpuppet.blogspot.com/2013/10/site-2-site-routed-vpn-trouble-shooting.html

Ken Felix

PCNSE

NSE

StrongSwan

FortiGate

Nominate a Forum Post for Knowledge Article Creation