Invalid SPI when communicating with Openswan

[olympian]

Hi all, I would like to know if Fortiwifi 60C is OK to use with a Openswan Linux server by IPSec. I tried to use the Openswan to collect the Fortiwifi, the tunnel is up and everything seems OK. However when I tried to ping on either side, I got " Invalid SPI" error in the Foriwifi VPN log. However, if I want to connect the Linux from the Fortigate (put the link up on Fortigate, or I should say auto=start from the Fortigate), IPSec SA Phase I is established but not Phase II. No Phase II action is logged/seen in both Fortigate and Linux log. Is there anything I' m missing...? Thanks! Regards, Jason

[olympian]

Reply to Message All Forums >>Other FortiGate and FortiOS Topics >>VPN >>

In Quick Mode: All source and destination address = 0.0.0.0/0 B. Regards, Jason

[emnoc]

I' ve always installed the actual subnet in the QM fields that matches what your openswan configuration ( left/right subnet ) This is probably why you have SPI invalid imho.