Hello :)
i've configured the vpn and Client like this: http://www.justdailynotes.com/fortinet/linux/2015/02/14/Fortigate-IPSec-Linux-NetworkManager/
So i have newest Version of Fortigateversion: v5.2.4,build688 (GA)
When i test connecton from Networkmanger i see this in the Logs from the Fortigate:
negotiate_error
Reasonpeer SA proposal not match local policy
So what i've done wrong. Yes i know the Howto is not actually, but should work. Here my settings:
config vpn ipsec phase1-interface
edit "IPSecClient"
set type dynamic
set interface "wan"
set mode-cfg enable
set ipv4-dns-server1 8.8.8.8
set proposal aes256-md5 aes256-sha1
set comments "VPN: IPSecClient (Created by VPN wizard)"
set dhgrp 2
set xauthtype auto
set authusrgrp "sslvpn"
set ipv4-start-ip 10.212.135.220
set ipv4-end-ip 10.212.135.240
set ipv4-netmask 255.255.255.0
set ipv4-split-include "intern"
set psksecret ENC 9KQnWKm4fcU1dVdTyDwy0rLs2Pn7r6GQMZjWK/IycYX573gyGw+F4C0Xy7KjuM5lcjx3qQUqmTtLa9daJ+niq24LEI1HG1/qdmVZpP4t0+7yFGW1AYcWstIqyNxzApOmg04IMjMxj4caQHgdy8PjVbO6rPb8kvyKefthZ2/lxeEO5QtUpLEm3i1CWdAMOHODxvn9HQ==
next
end
config vpn ipsec phase2-interface
edit "IPSecClient"
set phase1name "IPSecClient"
set proposal aes256-md5 aes256-sha1
set pfs disable
set keepalive enable
set comments "VPN: IPSecClient (Created by VPN wizard)"
next
end
edit 6
set uuid 8d88481e-63cf-51e5-fc4a-7d06221335f3
set srcintf "IPSecClient"
set dstintf "lan"
set srcaddr "IPSecClient_range"
set dstaddr "all"
set action accept
set schedule "always"
set service "ALL"
next
Thank a lot for help
best regards
Fortigate 60E v7.x (GA)
User | Count |
---|---|
2403 | |
1294 | |
778 | |
538 | |
454 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.