IPsec VPN with DDNS from both sides

[Moxeq]

Hello Guys,

I'm using DDNS configuration for the VPN connection from the two sites.

the configuration is straight forward using the wizard and the DDNS configurations from both FortiGates are okay.

however, the tunnel down from both sides when I tried to bring it up, even phase one was down!

is there any checks that should I do?

or just the FQDN takes some time to be usable? any idea?

FortiGate 

[anignan]

Hi @Moxeq ,

Can you check the configuration seen by the ike daemon? Run this command

dia vpn ike config...

Which DDNS service are you using?

Abdel

[hbac]

Hi @Moxeq,

Can you make sure the FQDN resolves to the correct IP address? If yes, you can run IKE debugs to see why it is not coming up. Please refer to https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-IPSEC-Tunnel-debugging-IKE/ta-p/1900...

Regards,