Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
snobs
New Contributor II

Forticlient 5.2 + IPSec with IPv6

Hello, so here it is Forticlient 5.2 with official IPv6 support. So I started with the new client and still get the same error as with 5.0:
ike 0: IKEv1 exchange=Quick id= ike 0:IKE61_0:5870:2413391: responder received first quick-mode message ike 0:IKE61_0:5870: dec ike 0:IKE61_0:5870: received notify type 32246 ike 0:IKE61_0:5870: received unexpected FORTICLIENT-CONNECT message ike 0:IKE61_0:5870:2413391: peer proposal is: peer:17:32.1.6.56-32.1.6.56:68, me:17:::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff:67 ike 0:IKE61_0:5870:IKE62:2413391: trying ike 0:IKE61_0:5870:2413391: no matching phase2 found ike 0:IKE61_0:5870:2413391: failed to get responder proposal ike 0:IKE61_0:5870: error processing quick-mode message from 2001:145:8b1:1222::23fe as responder ike 0:IKE61_0: connection expiring due to unexpected FORTICLIENT-CONNECT message ike 0:IKE61_0: deleting ike 0:IKE61_0: flushing ike 0:IKE61_0: sending SNMP tunnel DOWN trap ike 0:IKE61_0: flushed ike 0:IKE61_0:5870: HA send IKE SA del ike 0:IKE61_0:5870: send ISAKMP delete ike 0:IKE61_0:5870: enc F9478C6C40A23E96E2E894B28A44E09408100501E8A8C565000000500C000018ABE3FE6DECE03BFCB803E49E755DA35ED75AD93E0000001C0000000101100001F9478C6C40A23E96E2E894B28A44E094 ike 0:IKE61_0:5870: out F9478C6C40A23E96E2E894B28A44E09408100501E8A8C56500000054ADA0C2083E956119517DB9E4E96C008CD6F8637DEA1698BD3FDBF0FD63C770184ABCE2C3525778037446FE09D1DFE2A41A22751A7A44AD57 ike 0:IKE61_0:5870: sent IKE msg (ISAKMP SA DELETE-NOTIFY): 2001:145:8b1:f64::f1:500->2001:145:8b1:1222::23fe:500, len=84, id=f9478c6c40a23e96/e2e894b28a44e094:e8a8c565 ike 0:IKE61_0: delete dynamic ike 0:IKE61_0: deleted ike 0: comes 2001:145:8b1:1222::23fe:500->2001:145:8b1:f64::f1:500,ifindex=37....
Any ideas?
1 REPLY 1
emnoc
Esteemed Contributor III

bump I' ve been working with TAC off and on , interested in this. Specially since anyconnect-cisco has ipv6 support over ipv4 clients. It' s frustrating that kb/support don' t have any viable howto on getting this working.

PCNSE 

NSE 

StrongSwan  

PCNSE NSE StrongSwan
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors