Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
ipranger
Contributor

IPSEC with Ubuntu and Networkmanager; does not work, some policy issue

Hello :)

 

i've configured the vpn and Client like this: http://www.justdailynotes.com/fortinet/linux/2015/02/14/Fortigate-IPSec-Linux-NetworkManager/

So i have newest Version of Fortigateversion: v5.2.4,build688 (GA)

 

When i test connecton from Networkmanger i see this in the Logs from the Fortigate:

negotiate_error 

Reasonpeer SA proposal not match local policy

 

So what i've done wrong. Yes i know the Howto is not actually, but should work. Here my settings:

 

config vpn ipsec phase1-interface
    edit "IPSecClient"
        set type dynamic
        set interface "wan"
        set mode-cfg enable
        set ipv4-dns-server1 8.8.8.8
        set proposal aes256-md5 aes256-sha1
        set comments "VPN: IPSecClient (Created by VPN wizard)"
        set dhgrp 2
        set xauthtype auto
        set authusrgrp "sslvpn"
        set ipv4-start-ip 10.212.135.220
        set ipv4-end-ip 10.212.135.240
        set ipv4-netmask 255.255.255.0
        set ipv4-split-include "intern"
        set psksecret ENC 9KQnWKm4fcU1dVdTyDwy0rLs2Pn7r6GQMZjWK/IycYX573gyGw+F4C0Xy7KjuM5lcjx3qQUqmTtLa9daJ+niq24LEI1HG1/qdmVZpP4t0+7yFGW1AYcWstIqyNxzApOmg04IMjMxj4caQHgdy8PjVbO6rPb8kvyKefthZ2/lxeEO5QtUpLEm3i1CWdAMOHODxvn9HQ==
    next
end

 

config vpn ipsec phase2-interface
    edit "IPSecClient"
        set phase1name "IPSecClient"
        set proposal aes256-md5 aes256-sha1
        set pfs disable
        set keepalive enable
        set comments "VPN: IPSecClient (Created by VPN wizard)"
    next
end

 

edit 6
        set uuid 8d88481e-63cf-51e5-fc4a-7d06221335f3
        set srcintf "IPSecClient"
        set dstintf "lan"
        set srcaddr "IPSecClient_range"
        set dstaddr "all"
        set action accept
        set schedule "always"
        set service "ALL"
    next

 

Thank a lot for help

best regards

 

Fortigate 60E v7.x (GA)

Fortigate 60E v7.x (GA)
0 REPLIES 0
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors