Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
AlexBeaudet
New Contributor II

FortiOs 6.4.4 unable to active DTLS ssl vpn

Hi all,

 

I have a single user (out of 30 testers) for our new SSL VPN config which is having awful performance on his Windows 10 machine. Terrible pings to his workstation, unusable RDP and file transfer is not starting or stuck at an ultra low transfer speed.

 

So after ready a bit I tried setting up the DTLS tunnel to troubleshoot.  The problem is that after running the command on my fortigate the settings doesn't stick!

 

config vpn ssl settings     set dtls-tunnel enable end

 

running "show" after running the config doesn't list "set dtls-tunnel enable" and thus the client, with Preferred DTLS tunnel activated, is stuck at 98% and doesn't connect.

 

Bug in 6.4.4?  If anyone has seen or corrected this! thank you

2 REPLIES 2
apex
New Contributor

Hi, 

dtls is enabled by default under ssl vpn and that's the reason for not appearing under 'show' command.

Run 'show full-configuration' instead.

 

thanks

emnoc
Esteemed Contributor III

OP you need to use the "full" option 

 

e.g 

 

SOMASFCA0101A # show full vpn  ssl settings | grep dtls

    set dtls-hello-timeout 10

    set dtls-tunnel enable

    set dtls-max-proto-ver dtls1-2

    set dtls-min-proto-ver dtls1-0

PCNSE 

NSE 

StrongSwan  

PCNSE NSE StrongSwan
Labels
Top Kudoed Authors