Unlock Exclusive Benefits
Join Our Community Today!
Join our community and post in the forum to earn your exclusive Holiday badge! Become a member today!
LOGIN/REGISTER
CONTINUE AS A GUEST
- Support Forum
- Knowledge Base
- Customer Service
- Internal Article Nominations
- FortiGate
- FortiClient
- FortiADC
- FortiAIOps
- FortiAnalyzer
- FortiAP
- FortiAuthenticator
- FortiBridge
- FortiCache
- FortiCarrier
- FortiCASB
- FortiConverter
- FortiCNP
- FortiDAST
- FortiDDoS
- FortiDB
- FortiDNS
- FortiDLP
- FortiDeceptor
- FortiDevSec
- FortiDirector
- FortiEdgeCloud
- FortiEDR
- FortiExtender
- FortiGuest
- FortiGate Cloud
- FortiGuard
- FortiHypervisor
- FortiInsight
- FortiIsolator
- FortiMail
- FortiMonitor
- FortiManager
- FortiNAC
- FortiNAC-F
- FortiNDR (on-premise)
- FortiNDRCloud
- FortiPAM
- FortiPhish
- FortiPortal
- FortiPresence
- FortiSRA
- FortiProxy
- FortiRecon
- FortiRecorder
- FortiScan
- FortiSandbox
- FortiSASE
- FortiSIEM
- FortiSOAR
- FortiSwitch
- FortiTester
- FortiWAN
- FortiToken
- FortiVoice
- FortiWeb
- Wireless Controller
- FortiAppSec Cloud
- RMA Information and Announcements
- Lacework
- FortiCloud Products
- ZTNA
- 4D Documents
- Customer Service
- Community Groups
- Blogs
Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
- Fortinet Community
- Support Forum
- IPsec VPN Tunnel not coming up
Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
IPsec VPN Tunnel not coming up
Hi,
We are currently trying to establish a site to site VPN with a partner. The partner is using a Cisco ASA. He sent us the configuration parameters which we configured, but the VPN tunnel is still not coming up. I think the phase 1 is ok, the problem is with phase2.
Here' s the logs from the fortigate:
FGT60D4614014009 # ike 0: comes 41.224.14.131:500->41.224.244.77:500,ifindex=50.... ike 0: IKEv1 exchange=Identity Protection id=474981673aaface9/d0216ed361a1081d len=108 ike 0: in 474981673AAFACE9D0216ED361A1081D01100200000000000000006C0D00003800000001000000010000002C01010001000000240101000080010007800E0080800200028004000280030001800B0001800C7080000000184048B7D56EBCE88525E7DE7F00D6C2D3C0000000 ike 0:VPN TTN:16877: initiator: main mode get 1st response... ike 0:VPN TTN:16877: VID FRAGMENTATION 4048B7D56EBCE88525E7DE7F00D6C2D3C0000000 ike 0:VPN TTN:16877: negotiation result ike 0:VPN TTN:16877: proposal id = 1: ike 0:VPN TTN:16877: protocol id = ISAKMP: ike 0:VPN TTN:16877: trans_id = KEY_IKE. ike 0:VPN TTN:16877: encapsulation = IKE/none ike 0:VPN TTN:16877: type=OAKLEY_ENCRYPT_ALG, val=AES_CBC. ike 0:VPN TTN:16877: type=OAKLEY_HASH_ALG, val=SHA. ike 0:VPN TTN:16877: type=AUTH_METHOD, val=PRESHARED_KEY. ike 0:VPN TTN:16877: type=OAKLEY_GROUP, val=1024. ike 0:VPN TTN:16877: ISAKMP SA lifetime=28800 ike 0:VPN TTN:16877: out 474981673AAFACE9D0216ED361A1081D0410020000000000000000B40A0000842E7F83A440CB00F255BBD6C47713FDD938590D9E4D2F567F7CFE340490E9F70446C920A9D80E135641AC79B8C630D887DCD5530DF892B2D67E0C5F803E966BA6E5C1EC935D227D89EFBE53D27BD012736FF126EF86B92801DFA55B1A19AF71EF8E923F00BEDF1BD1DA76A5AF12129809A4886AD2DB9CB08021E62E0276D91C8C00000014DABD5FD2B9237F18E6924F26AC5BB2AF ike 0:VPN TTN:16877: sent IKE msg (ident_i2send): 41.224.244.77:500->41.224.14.131:500, len=180, id=474981673aaface9/d0216ed361a1081d ike 0: comes 41.224.14.131:500->41.224.244.77:500,ifindex=50.... ike 0: IKEv1 exchange=Identity Protection id=474981673aaface9/d0216ed361a1081d len=256 ike 0: in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ike 0:VPN TTN:16877: initiator: main mode get 2nd response... ike 0:VPN TTN:16877: VID CISCO-UNITY 12F5F28C457168A9702D9FE274CC0100 ike 0:VPN TTN:16877: peer supports UNITY ike 0:VPN TTN:16877: VID draft-ietf-ipsra-isakmp-xauth-06.txt 09002689DFD6B712 ike 0:VPN TTN:16877: VID unknown (16): 25E6C9CE61A0081DB8BA401A26766C19 ike 0:VPN TTN:16877: VID unknown (16): 1F07F70EAA6514D3B0FA96542A500100 ike 0:VPN TTN:16877: ISAKMP SA 474981673aaface9/d0216ed361a1081d key 16:1A654307DCAE4ECA1FB1916AE40067D8 ike 0:VPN TTN:16877: add INITIAL-CONTACT ike 0:VPN TTN:16877: enc 474981673AAFACE9D0216ED361A1081D05100201000000000000005C0800000C0100000029E0F44D0B00001866B94E83B6DE51DF6BD6AD5B584364C9F61D2E970000001C0000000101106002474981673AAFACE9D0216ED361A1081D ike 0:VPN TTN:16877: out 474981673AAFACE9D0216ED361A1081D05100201000000000000006C338C4B9F667E7DC90860B2541F716F185CF7E6B42813D02B34C11EFD6B7530644B6D91E5685CA6D1609DFDE30FEE4108D130782677BC3B12A27E544C7E11D2EA89BB51401C1919352C6A93D5CBEB590B ike 0:VPN TTN:16877: sent IKE msg (ident_i3send): 41.224.244.77:500->41.224.14.131:500, len=108, id=474981673aaface9/d0216ed361a1081d ike 0: comes 41.224.14.131:500->41.224.244.77:500,ifindex=50.... ike 0: IKEv1 exchange=Informational id=474981673aaface9/d0216ed361a1081d len=120 ike 0: in 474981673AAFACE9D0216ED361A1081D0B10050000000000000000780000005C0000000100000010E2B2FCD2B86DA6ABB47555516F800C4E70A7F72E126060531517E54363552E459FE4BB9BB60902F10F1E614CC4ECEA8B33A3EA63D6FB2D783F480BD3E8D2D2BC2FECE4E794D2B8937258BE9FB21D02CD ike 0:VPN TTN:16877: ignoring unencrypted PAYLOAD-MALFORMED message from 41.224.14.131:500. ike 0:VPN TTN:VPN TTN P2: IPsec SA connect 50 41.224.244.77->41.224.14.131:0 ike 0:VPN TTN:VPN TTN P2: using existing connection ike 0:VPN TTN:VPN TTN P2: config found ike 0:VPN TTN:VPN TTN P2: IPsec SA connect 50 41.224.244.77->41.224.14.131:500 negotiating ike 0:VPN TTN:16877:VPN TTN P2:17015: ISAKMP SA still negotiating, queuing quick-mode request ike 0:VPN TTN:16877: out 474981673AAFACE9D0216ED361A1081D05100201000000000000006C338C4B9F667E7DC90860B2541F716F185CF7E6B42813D02B34C11EFD6B7530644B6D91E5685CA6D1609DFDE30FEE4108D130782677BC3B12A27E544C7E11D2EA89BB51401C1919352C6A93D5CBEB590B ike 0:VPN TTN:16877: sent IKE msg (P1_RETRANSMIT): 41.224.244.77:500->41.224.14.131:500, len=108, id=474981673aaface9/d0216ed361a1081d ike 0: comes 41.224.14.131:500->41.224.244.77:500,ifindex=50.... ike 0: IKEv1 exchange=Identity Protection id=474981673aaface9/d0216ed361a1081d len=256 ike 0: in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ike 0:VPN TTN:16877: retransmission, re-send last message ike 0:VPN TTN:16877: out 474981673AAFACE9D0216ED361A1081D05100201000000000000006C338C4B9F667E7DC90860B2541F716F185CF7E6B42813D02B34C11EFD6B7530644B6D91E5685CA6D1609DFDE30FEE4108D130782677BC3B12A27E544C7E11D2EA89BB51401C1919352C6A93D5CBEB590B ike 0:VPN TTN:16877: sent IKE msg (retransmit): 41.224.244.77:500->41.224.14.131:500, len=108, id=474981673aaface9/d0216ed361a1081d ike 0: comes 41.224.14.131:500->41.224.244.77:500,ifindex=50.... ike 0: IKEv1 exchange=Identity Protection id=474981673aaface9/d0216ed361a1081d len=256 ike 0: in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ike 0:VPN TTN:16877: retransmission, re-send last message ike 0:VPN TTN:16877: out 474981673AAFACE9D0216ED361A1081D05100201000000000000006C338C4B9F667E7DC90860B2541F716F185CF7E6B42813D02B34C11EFD6B7530644B6D91E5685CA6D1609DFDE30FEE4108D130782677BC3B12A27E544C7E11D2EA89BB51401C1919352C6A93D5CBEB590B ike 0:VPN TTN:16877: sent IKE msg (retransmit): 41.224.244.77:500->41.224.14.131:500, len=108, id=474981673aaface9/d0216ed361a1081d ike 0: comes 41.224.14.131:500->41.224.244.77:500,ifindex=50.... ike 0: IKEv1 exchange=Identity Protection id=474981673aaface9/d0216ed361a1081d len=256 ike 0: in 474981673AAFACE9D0216ED361A1081D0410020000000000000001000A00008408413E837E46626B7A07879E99EC6B73BF71A99C00F3AF2A0B68B526FD2D3EBDC7AF274255283369206E877CA0EBB0A62257AF229F0600D85C90BF266C8852B2336E9CAFE8F0E7EF63E57CD1E28647A049BF6D1DFCD45C6C23B3F92A95B1EC29A0F9992FC4D78EB018DC54C903339121BCD535F9C9246BD2E62A787466485D980D000018C30B61834BB43EBC5839BC3F53695599BF7DCA4C0D00001412F5F28C457168A9702D9FE274CC01000D00000C09002689DFD6B7120D00001425E6C9CE61A0081DB8BA401A26766C19000000141F07F70EAA6514D3B0FA96542A500100 ike 0:VPN TTN:16877: retransmission, re-send last message ike 0:VPN TTN:16877: out 474981673AAFACE9D0216ED361A1081D05100201000000000000006C338C4B9F667E7DC90860B2541F716F185CF7E6B42813D02B34C11EFD6B7530644B6D91E5685CA6D1609DFDE30FEE4108D130782677BC3B12A27E544C7E11D2EA89BB51401C1919352C6A93D5CBEB590B ike 0:VPN TTN:16877: sent IKE msg (retransmit): 41.224.244.77:500->41.224.14.131:500, len=108, id=474981673aaface9/d0216ed361a1081d ike 0: comes 41.224.14.131:500->41.224.244.77:500,ifindex=50.... ike 0: IKEv1 exchange=Informational id=474981673aaface9/d0216ed361a1081d:c9012dbd len=92 ike 0: in 474981673AAFACE9D0216ED361A1081D08100501C9012DBD0000005CE123C367CE145EF13100ED8CF12C8DBB52DB236F140033E2256EE2353C0CD1EE27EAEADC7DDC3D9D96978AFEB49007492BF5CC77CE7A1A1B4953609CD8EF0869 ike 0:VPN TTN:VPN TTN P2: IPsec SA connect 50 41.224.244.77->41.224.14.131:0 ike 0:VPN TTN:VPN TTN P2: using existing connection ike 0:VPN TTN:VPN TTN P2: config found ike 0:VPN TTN: request is on the queue ike 0:VPN TTN:VPN TTN P2: IPsec SA connect 50 41.224.244.77->41.224.14.131:0 ike 0:VPN TTN:VPN TTN P2: using existing connection ike 0:VPN TTN:VPN TTN P2: config found ike 0:VPN TTN: request is on the queue ike 0:VPN TTN:VPN TTN P2: IPsec SA connect 50 41.224.244.77->41.224.14.131:0 ike 0:VPN TTN:VPN TTN P2: using existing connection ike 0:VPN TTN:VPN TTN P2: config found ike 0:VPN TTN: request is on the queue ike 0:VPN TTN:16877: out 474981673AAFACE9D0216ED361A1081D05100201000000000000006C338C4B9F667E7DC90860B2541F716F185CF7E6B42813D02B34C11EFD6B7530644B6D91E5685CA6D1609DFDE30FEE4108D130782677BC3B12A27E544C7E11D2EA89BB51401C1919352C6A93D5CBEB590B ike 0:VPN TTN:16877: sent IKE msg (P1_RETRANSMIT): 41.224.244.77:500->41.224.14.131:500, len=108, id=474981673aaface9/d0216ed361a1081d ike 0:VPN TTN:VPN TTN P2: IPsec SA connect 50 41.224.244.77->41.224.14.131:0 ike 0:VPN TTN:VPN TTN P2: using existing connection ike 0:VPN TTN:VPN TTN P2: config found ike 0:VPN TTN: request is on the queue ike 0:VPN TTN:VPN TTN P2: IPsec SA connect 50 41.224.244.77->41.224.14.131:0 ike 0:VPN TTN:VPN TTN P2: using existing connection ike 0:VPN TTN:VPN TTN P2: config found ike 0:VPN TTN: request is on the queue ike 0:VPN TTN:16877: negotiation timeout, deleting ike 0:VPN TTN: connection expiring due to phase1 down ike 0:VPN TTN: deleting ike 0:VPN TTN: flushing ike 0:VPN TTN: flushed ike 0:VPN TTN: deleted ike 0:VPN TTN: schedule auto-negotiate ike 0:VPN TTN: auto-negotiate connection ike 0:VPN TTN: created connection: 0x2671788 50 41.224.244.77->41.224.14.131:500. ike 0:VPN TTN:16878: initiator: main mode is sending 1st message... ike 0:VPN TTN:16878: cookie 10a08ae40831be4e/0000000000000000 ike 0:VPN TTN:16878: out 10A08AE40831BE4E00000000000000000110020000000000000000900D00003800000001000000010000002C010100010000002401010000800B0001800C708080010007800E00808003000180020002800400020D000014AFCAD71368A1F1C96B8696FC775701000D0000144048B7D56EBCE88525E7DE7F00D6C2D3000000148299031757A36082C6A621DE0005116B ike 0:VPN TTN:16878: sent IKE msg (ident_i1send): 41.224.244.77:500->41.224.14.131:500, len=144, id=10a08ae40831be4e/0000000000000000 ike 0: comes 41.224.14.131:500->41.224.244.77:500,ifindex=50.... ike 0: IKEv1 exchange=Identity Protection id=10a08ae40831be4e/b19a8bb09836f679 len=108 ike 0: in 10A08AE40831BE4EB19A8BB09836F67901100200000000000000006C0D00003800000001000000010000002C01010001000000240101000080010007800E0080800200028004000280030001800B0001800C7080000000184048B7D56EBCE88525E7DE7F00D6C2D3C0000000 ike 0:VPN TTN:16878: initiator: main mode get 1st response... ike 0:VPN TTN:16878: VID FRAGMENTATION 4048B7D56EBCE88525E7DE7F00D6C2D3C0000000 ike 0:VPN TTN:16878: negotiation result ike 0:VPN TTN:16878: proposal id = 1: ike 0:VPN TTN:16878: protocol id = ISAKMP: ike 0:VPN TTN:16878: trans_id = KEY_IKE. ike 0:VPN TTN:16878: encapsulation = IKE/none ike 0:VPN TTN:16878: type=OAKLEY_ENCRYPT_ALG, val=AES_CBC. ike 0:VPN TTN:16878: type=OAKLEY_HASH_ALG, val=SHA. ike 0:VPN TTN:16878: type=AUTH_METHOD, val=PRESHARED_KEY. ike 0:VPN TTN:16878: type=OAKLEY_GROUP, val=1024. ike 0:VPN TTN:16878: ISAKMP SA lifetime=28800 ike 0:VPN TTN:16878: out 10A08AE40831BE4EB19A8BB09836F6790410020000000000000000B40A00008491B98E92359D07E6AA8F39EE71B174EC4BF7C3B1EB12DB26928116A45E15EAA463646CE3043B05224D8A84883E9B611F302320365DC8C5654061861CE61B2318A1766BF9E724EABEF605E65999CC3DE7AB77C001C8A9BC12E7AAE772344229B352CF397730823DBDE2376044F7DFB5C94918415E59E21F3001DDD24A3CA7132900000014DCBB0AD01A226EA3D688FCA4F14F6A12 ike 0:VPN TTN:16878: sent IKE msg (ident_i2send): 41.224.244.77:500->41.224.14.131:500, len=180, id=10a08ae40831be4e/b19a8bb09836f679 ike 0: comes 41.224.14.131:500->41.224.244.77:500,ifindex=50.... ike 0: IKEv1 exchange=Identity Protection id=10a08ae40831be4e/b19a8bb09836f679 len=256 ike 0: in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ike 0:VPN TTN:16878: initiator: main mode get 2nd response... ike 0:VPN TTN:16878: VID CISCO-UNITY 12F5F28C457168A9702D9FE274CC0100 ike 0:VPN TTN:16878: peer supports UNITY ike 0:VPN TTN:16878: VID draft-ietf-ipsra-isakmp-xauth-06.txt 09002689DFD6B712 ike 0:VPN TTN:16878: VID unknown (16): 445D2CAD9837F679D21BE1F2D14B2A26 ike 0:VPN TTN:16878: VID unknown (16): 1F07F70EAA6514D3B0FA96542A500100 ike 0:VPN TTN:16878: ISAKMP SA 10a08ae40831be4e/b19a8bb09836f679 key 16:3073720308C6AD414A34139ACCE24F8B ike 0:VPN TTN:16878: add INITIAL-CONTACT ike 0:VPN TTN:16878: enc 10A08AE40831BE4EB19A8BB09836F67905100201000000000000005C0800000C0100000029E0F44D0B000018CDCCA89184A06EB2B8CD3433557E3548B899F4380000001C000000010110600210A08AE40831BE4EB19A8BB09836F679 ike 0:VPN TTN:16878: out 10A08AE40831BE4EB19A8BB09836F67905100201000000000000006CB8AAD0AE1C47D86C7A3C61736FE0F4B901EBEE78ACD2E61D2B8E9C12CA68C93B81A9267976DA120F5226F453D3C4C3AE0508604CE7A1558C010401DC29D4A4BAFC892C24CE84AFD004E0CC590A40F04B ike 0:VPN TTN:16878: sent IKE msg (ident_i3send): 41.224.244.77:500->41.224.14.131:500, len=108, id=10a08ae40831be4e/b19a8bb09836f679 ike 0: comes 41.224.14.131:500->41.224.244.77:500,ifindex=50.... ike 0: IKEv1 exchange=Informational id=10a08ae40831be4e/b19a8bb09836f679 len=120 ike 0: in 10A08AE40831BE4EB19A8BB09836F6790B10050000000000000000780000005C0000000100000010D42EB0E7F217E9563094ADDA9A8C5EFC8FCE0D460CEC3FECEC595F92B844CC378FDF807FA1281DD6B95E815A0390C1D0DB89C96B3518F7EE31516F0142E5F344A2E212F1196527569E7E6A21534339DB ike 0:VPN TTN:16878: ignoring unencrypted PAYLOAD-MALFORMED message from 41.224.14.131:500. ike 0:VPN TTN:VPN TTN P2: IPsec SA connect 50 41.224.244.77->41.224.14.131:0 ike 0:VPN TTN:VPN TTN P2: using existing connection ike 0:VPN TTN:VPN TTN P2: config found ike 0:VPN TTN:VPN TTN P2: IPsec SA connect 50 41.224.244.77->41.224.14.131:500 negotiating ike 0:VPN TTN:16878:VPN TTN P2:17016: ISAKMP SA still negotiating, queuing quick-mode request diike 0:VPN TTN:VPN TTN P2: IPsec SA connect 50 41.224.244.77->41.224.14.131:0 ike 0:VPN TTN:VPN TTN P2: using existing connection ike 0:VPN TTN:VPN TTN P2: config found ike 0:VPN TTN: request is on the queue ike 0:VPN TTN:16878: out 10A08AE40831BE4EB19A8BB09836F67905100201000000000000006CB8AAD0AE1C47D86C7A3C61736FE0F4B901EBEE78ACD2E61D2B8E9C12CA68C93B81A9267976DA120F5226F453D3C4C3AE0508604CE7A1558C010401DC29D4A4BAFC892C24CE84AFD004E0CC590A40F04B ike 0:VPN TTN:16878: sent IKE msg (P1_RETRANSMIT): 41.224.244.77:500->41.224.14.131:500, len=108, id=10a08ae40831be4e/b19a8bb09836f679 ike 0: comes 41.224.14.131:500->41.224.244.77:500,ifindex=50.... ike 0: IKEv1 exchange=Identity Protection id=10a08ae40831be4e/b19a8bb09836f679 len=256 ike 0: in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ike 0:VPN TTN:16878: retransmission, re-send last message ike 0:VPN TTN:16878: out 10A08AE40831BE4EB19A8BB09836F67905100201000000000000006CB8AAD0AE1C47D86C7A3C61736FE0F4B901EBEE78ACD2E61D2B8E9C12CA68C93B81A9267976DA120F5226F453D3C4C3AE0508604CE7A1558C010401DC29D4A4BAFC892C24CE84AFD004E0CC590A40F04B ike 0:VPN TTN:16878: sent IKE msg (retransmit): 41.224.244.77:500->41.224.14.131:500, len=108, id=10a08ae40831be4e/b19a8bb09836f679 ike 0: comes 41.224.14.131:500->41.224.244.77:500,ifindex=50.... ike 0: IKEv1 exchange=Identity Protection id=10a08ae40831be4e/b19a8bb09836f679 len=256 ike 0: in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ike 0:VPN TTN:16878: retransmission, re-send last message ike 0:VPN TTN:16878: out 10A08AE40831BE4EB19A8BB09836F67905100201000000000000006CB8AAD0AE1C47D86C7A3C61736FE0F4B901EBEE78ACD2E61D2B8E9C12CA68C93B81A9267976DA120F5226F453D3C4C3AE0508604CE7A1558C010401DC29D4A4BAFC892C24CE84AFD004E0CC590A40F04B ike 0:VPN TTN:16878: sent IKE msg (retransmit): 41.224.244.77:500->41.224.14.131:500, len=108, id=10a08ae40831be4e/b19a8bb09836f679 ike 0: comes 41.224.14.131:500->41.224.244.77:500,ifindex=50.... ike 0: IKEv1 exchange=Identity Protection id=10a08ae40831be4e/b19a8bb09836f679 len=256 ike 0: in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ike 0:VPN TTN:16878: retransmission, re-send last message ike 0:VPN TTN:16878: out 10A08AE40831BE4EB19A8BB09836F67905100201000000000000006CB8AAD0AE1C47D86C7A3C61736FE0F4B901EBEE78ACD2E61D2B8E9C12CA68C93B81A9267976DA120F5226F453D3C4C3AE0508604CE7A1558C010401DC29D4A4BAFC892C24CE84AFD004E0CC590A40F04B ike 0:VPN TTN:16878: sent IKE msg (retransmit): 41.224.244.77:500->41.224.14.131:500, len=108, id=10a08ae40831be4e/b19a8bb09836f679 ike 0: comes 41.224.14.131:500->41.224.244.77:500,ifindex=50.... ike 0: IKEv1 exchange=Informational id=10a08ae40831be4e/b19a8bb09836f679:1b0fe195 len=92 ike 0: in 10A08AE40831BE4EB19A8BB09836F679081005011B0FE1950000005CA2741524454FAFB1752D7D40F94938C595307ABAE3E568DEE5FEBDD74107F073E0D3E4B984C58B5ACB315BAC4F8D769F39C28CE0A0ED66F60F1D19BACDD36600 ag debug disableCan you help me please? Thanks
3 REPLIES 3
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
With out seeing your configuration it' s hard to make a proper diagnostic. Can you post the cisco/fgt side of things?
Your failing at IKE so it could be alot of things.
PCNSE
NSE
StrongSwan
PCNSE
NSE
StrongSwan
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I had a similar log few months back. But the other end had one sonicwall.
It was a configuration mismatch in my case, pfs was not enabled on Sonicwall
Not sure about your case, Cross check all the parameters ..
Nihas [\b]
Nihas [\b]
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
ignoring unencrypted PAYLOAD-MALFORMED messageThis is almost always the phase1 algorithms not matching up.
Labels
-
FortiGate
9,347 -
FortiClient
1,899 -
5.2
801 -
FortiManager
794 -
5.4
639 -
FortiAnalyzer
606 -
FortiSwitch
511 -
FortiAP
506 -
FortiClient EMS
470 -
6.0
416 -
5.6
362 -
FortiMail
339 -
SSL-VPN
298 -
IPsec
274 -
6.2
251 -
FortiAuthenticator v5.5
234 -
FortiWeb
225 -
FortiNAC
221 -
5.0
196 -
FortiGuard
150 -
SD-WAN
140 -
FortiAuthenticator
130 -
6.4
128 -
Firewall policy
105 -
FortiGateCloud
104 -
FortiCloud Products
102 -
FortiSIEM
101 -
FortiToken
96 -
Wireless Controller
86 -
Customer Service
81 -
FortiProxy
72 -
High Availability
68 -
4.0MR3
64 -
FortiEDR
61 -
Fortivoice
60 -
FortiADC
57 -
Routing
57 -
ZTNA
56 -
DNS
55 -
VLAN
55 -
BGP
51 -
SAML
49 -
RADIUS
48 -
Authentication
48 -
LDAP
48 -
FortiSandbox
47 -
FortiExtender
46 -
NAT
46 -
FortiGate-VM
44 -
Certificate
44 -
SSO
43 -
FortiDNS
42 -
FortiGate v5.4
35 -
VDOM
35 -
FortiSwitch v6.4
34 -
FortiLink
34 -
Interface
33 -
Application control
33 -
FortiConnect
32 -
Logging
30 -
FortiWAN
28 -
Virtual IP
28 -
Web profile
27 -
FortiGate v5.2
26 -
FortiConverter
26 -
FortiPAM
25 -
FortiPortal
23 -
SSL SSH inspection
23 -
FortiGate Cloud
21 -
Static route
21 -
FortiSwitch v6.2
20 -
Traffic shaping
20 -
Automation
20 -
snmp
19 -
SSID
19 -
FortiMonitor
18 -
WAN optimization
17 -
OSPF
16 -
FortiDDoS
15 -
System settings
15 -
FortiGate v5.0
14 -
FortiSOAR
14 -
FortiCASB
14 -
Admin
14 -
Security profile
14 -
Web application firewall profile
14 -
IP address management - IPAM
14 -
API
13 -
IPS signature
13 -
FortiManager v5.0
12 -
Proxy policy
12 -
FortiManager v4.0
11 -
FortiRecorder
11 -
FortiAP profile
11 -
Intrusion prevention
11 -
FortiBridge
10 -
Explicit proxy
10 -
Traffic shaping policy
10 -
Port policy
10 -
Web rating
10 -
4.0MR2
9 -
FortiGate v4.0 MR3
9 -
FortiAnalyzer v5.0
9 -
FortiWeb v5.0
9 -
Fabric connector
9 -
FortiDeceptor
8 -
FortiCache
8 -
RMA Information and Announcements
8 -
DNS filter
8 -
trunk
8 -
Users
8 -
Antivirus profile
8 -
Traffic shaping profile
8 -
Fortinet Engage Partner Program
8 -
4.0
7 -
FortiToken Cloud
6 -
Packet capture
6 -
Authentication rule and scheme
6 -
FortiCarrier
5 -
FortiScan
5 -
FortiTester
5 -
Application signature
5 -
DLP profile
5 -
Email filter profile
5 -
3.6
4 -
FortiDirector
4 -
Internet service database
4 -
NAC policy
4 -
DLP sensor
4 -
Netflow
4 -
Protocol option
4 -
TACACS
4 -
Replacement messages
4 -
SDN connector
4 -
Service
4 -
VoIP profile
4 -
Multicast routing
4 -
Cloud Management Security
4 -
FortiDB
3 -
FortiHypervisor
3 -
FortiNDR
3 -
DLP Dictionary
3 -
DoS policy
3 -
Multicast policy
3 -
FortiInsight
2 -
FortiAI
2 -
Kerberos
2 -
File filter
2 -
Schedule
2 -
Zone
2 -
Vulnerability Management
2 -
FortiEdge Cloud
2 -
FortiGuest
2 -
4.0MR1
1 -
FortiManager-VM
1 -
FortiCWP
1 -
Subscription Renewal Policy
1 -
Video Filter
1 -
ICAP profile
1 -
Virtual wire pair
1 -
FortiEdge
1
Top Kudoed Authors
| User | Count |
|---|---|
| 2037 | |
| 1169 | |
| 770 | |
| 448 | |
| 333 |
Broad. Integrated. Automated.
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Security Research
Company
News & Articles
Copyright 2025 Fortinet, Inc. All Rights Reserved.