Hello :)
i've configured the vpn and Client like this: http://www.justdailynotes.com/fortinet/linux/2015/02/14/Fortigate-IPSec-Linux-NetworkManager/
So i have newest Version of Fortigateversion: v5.2.4,build688 (GA)
When i test connecton from Networkmanger i see this in the Logs from the Fortigate:
negotiate_error
Reasonpeer SA proposal not match local policy
So what i've done wrong. Yes i know the Howto is not actually, but should work. Here my settings:
config vpn ipsec phase1-interface
edit "IPSecClient"
set type dynamic
set interface "wan"
set mode-cfg enable
set ipv4-dns-server1 8.8.8.8
set proposal aes256-md5 aes256-sha1
set comments "VPN: IPSecClient (Created by VPN wizard)"
set dhgrp 2
set xauthtype auto
set authusrgrp "sslvpn"
set ipv4-start-ip 10.212.135.220
set ipv4-end-ip 10.212.135.240
set ipv4-netmask 255.255.255.0
set ipv4-split-include "intern"
set psksecret ENC 9KQnWKm4fcU1dVdTyDwy0rLs2Pn7r6GQMZjWK/IycYX573gyGw+F4C0Xy7KjuM5lcjx3qQUqmTtLa9daJ+niq24LEI1HG1/qdmVZpP4t0+7yFGW1AYcWstIqyNxzApOmg04IMjMxj4caQHgdy8PjVbO6rPb8kvyKefthZ2/lxeEO5QtUpLEm3i1CWdAMOHODxvn9HQ==
next
end
config vpn ipsec phase2-interface
edit "IPSecClient"
set phase1name "IPSecClient"
set proposal aes256-md5 aes256-sha1
set pfs disable
set keepalive enable
set comments "VPN: IPSecClient (Created by VPN wizard)"
next
end
edit 6
set uuid 8d88481e-63cf-51e5-fc4a-7d06221335f3
set srcintf "IPSecClient"
set dstintf "lan"
set srcaddr "IPSecClient_range"
set dstaddr "all"
set action accept
set schedule "always"
set service "ALL"
next
Thank a lot for help
best regards
Fortigate 60E v7.x (GA)
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1713 | |
1093 | |
752 | |
447 | |
231 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.