Trying to figure why the IPsec phase 1 negation fails then is fixes itself after a few minutes. This is an on and off thing which has happened twice in 2 days.
Any tips to try figure the issue out
Hi,This issue seems to be an odd behavior related to firmware version.
As per your comments, I see that you are using 6.0.6 firmware version, which is end of support on 2022-09-29, Hence I suggest you to upgrade the firmware version to 6.2.X and above.RegardsPratik.
I will be doing the update on this asap and see if it fixes the issue.
If both ends are fortigate firewalls, execute these commands in both firewalls in both firewalls:
diag vpn ike log-filter dst-addr4 a.b.c.d (where a.b.c.d is the remote gateway ip)
diag debug application ike -1
Once you get the debug logs, please disable the debug using this command "diag debug disable"
diag debug enable
unfortunately the other side isn't Fortigate. I will do a software update and see how that turns out.
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2023 Fortinet, Inc. All Rights Reserved.