IPsec Failure

[hkyk]

How to solve IPsec failure about 'IPsec DPD failure'?IPsec, FortiGate

I have two firewall firmware is '6.2.9' and already setup IPsec VPN, also is working normally.

But this IPsec VPN suddenly disconnected and firewall system event show 'IPsec DPD failure'.

On this case, how to solve IPsec failure about 'IPsec DPD failure'?

[jintrah_FTNT]

Hi,

There is probably some network glitch for a short time that peer went unreachable and triggered dpd failures, please see https://community.fortinet.com/t5/FortiClient/Technical-Tip-Configuring-DPD-dead-peer-detection-on-I... for details on DPD functions.

Best regards,

Jin

[seshuganesh]

Hi Team,

DPD means dead peer gateway. The failure will happen when gateway is not reachable or gateway itself is not responding.

At the time of issue, can you take sniffer with public ip of the remote gateway using this command:

diag sniffer packet any 'host a.b.c.d' 4 0 a (where a.b.c.d is the remote gateway ip address)

please collect sniffer logs and keep us posted