Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
snobs
New Contributor II

Forticlient 5.2 + IPSec with IPv6

Hello, so here it is Forticlient 5.2 with official IPv6 support. So I started with the new client and still get the same error as with 5.0:
ike 0: IKEv1 exchange=Quick id= ike 0:IKE61_0:5870:2413391: responder received first quick-mode message ike 0:IKE61_0:5870: dec ike 0:IKE61_0:5870: received notify type 32246 ike 0:IKE61_0:5870: received unexpected FORTICLIENT-CONNECT message ike 0:IKE61_0:5870:2413391: peer proposal is: peer:17:32.1.6.56-32.1.6.56:68, me:17:::-ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff:67 ike 0:IKE61_0:5870:IKE62:2413391: trying ike 0:IKE61_0:5870:2413391: no matching phase2 found ike 0:IKE61_0:5870:2413391: failed to get responder proposal ike 0:IKE61_0:5870: error processing quick-mode message from 2001:145:8b1:1222::23fe as responder ike 0:IKE61_0: connection expiring due to unexpected FORTICLIENT-CONNECT message ike 0:IKE61_0: deleting ike 0:IKE61_0: flushing ike 0:IKE61_0: sending SNMP tunnel DOWN trap ike 0:IKE61_0: flushed ike 0:IKE61_0:5870: HA send IKE SA del ike 0:IKE61_0:5870: send ISAKMP delete ike 0:IKE61_0:5870: enc F9478C6C40A23E96E2E894B28A44E09408100501E8A8C565000000500C000018ABE3FE6DECE03BFCB803E49E755DA35ED75AD93E0000001C0000000101100001F9478C6C40A23E96E2E894B28A44E094 ike 0:IKE61_0:5870: out F9478C6C40A23E96E2E894B28A44E09408100501E8A8C56500000054ADA0C2083E956119517DB9E4E96C008CD6F8637DEA1698BD3FDBF0FD63C770184ABCE2C3525778037446FE09D1DFE2A41A22751A7A44AD57 ike 0:IKE61_0:5870: sent IKE msg (ISAKMP SA DELETE-NOTIFY): 2001:145:8b1:f64::f1:500->2001:145:8b1:1222::23fe:500, len=84, id=f9478c6c40a23e96/e2e894b28a44e094:e8a8c565 ike 0:IKE61_0: delete dynamic ike 0:IKE61_0: deleted ike 0: comes 2001:145:8b1:1222::23fe:500->2001:145:8b1:f64::f1:500,ifindex=37....
Any ideas?
1 REPLY 1
emnoc
Esteemed Contributor III

bump I' ve been working with TAC off and on , interested in this. Specially since anyconnect-cisco has ipv6 support over ipv4 clients. It' s frustrating that kb/support don' t have any viable howto on getting this working.

PCNSE 

NSE 

StrongSwan  

PCNSE NSE StrongSwan
Announcements
Check out our Community Chatter Blog! Click here to get involved
Labels
Top Kudoed Authors