I have a probleme with negotiation
If (IF) this is truly a phase2 error, then it might be
- mismatching QM selectors (a.k.a. "protected domains")
- PFS setting mismatch
- if this is a dial-in tunnel: failure to assign client IP address
Thanks for your feedback.
The problem still exists, today in the morning the tunnel is down but after an hour it is up.
is DPD enable?
what's the other end ? ( fgt panw csco forcepoint jnpr )
if you "vpn ike gateway clear" does that speed up the recover ?
The remote device is FortiGate.
The recover speedly
Could you have bad internet access? This might explain the interruptions
For the ipsec-sa make sure auto negotiate is enabled for speedy recovery
config vpn ipsec phase2-interface
edit < name >
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2023 Fortinet, Inc. All Rights Reserved.