After upgrading from 5.4.x to 6.0.3 I am not able set keepalive enable on phase2 anymore.
I have compared the old and new configuration, and the VPN-config is the same (expect the keepalive-config).
Any idé why it is gone and any alternative commands?
Best regards
Yngve
config vpn ipsec phase1-interface
edit "VPN_ABC01"
set type ddns
set interface "wan1"
set ike-version 2
set peertype any
set proposal aes128-sha1
set dpd on-idle
set remotegw-ddns "abc01.mydomain.net"
set psksecret ENC secret
set dpd-retryinterval 5
next
end
config vpn ipsec phase2-interface
edit "VPN_ABC01"
set phase1name "VPN_ABC01"
set proposal aes128-sha1
set auto-negotiate enable
next
end
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1688 | |
1087 | |
752 | |
446 | |
227 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.