Ipsec IKEV2 remote access vpn error

[rezafathi]

Hello,

I have created a ipsec ikev2 remote access vpn but when i trying to connect to it from forticlient in android or pc it shows an error stating: "protocol timeout reached" . Here is the fortigate (V 7.6.3) vpn config:

config vpn ipsec phase1-interface
 edit "ITC VPN"
set type dynamic
set interface "port2"
set ike-version 2
set local-gw wan ip
set peertype one
set net-device disable
set mode-cfg enable
set ipv4-dns-server1 192.168.0.46
set proposal aes256-sha256
set comments "VPN: ITC VPN -- Created by VPN wizard"
set dhgrp 14
set eap enable
set eap-identity send-request
set wizard-type dialup-forticlient
set authusrgrp "IT_Users"
set transport udp
set peerid "reza"
set ipv4-start-ip 10.60.70.1
set ipv4-end-ip 10.60.70.3
set save-password enable cA2TeDH7DfQItGyaCzAdm+nyAodhdjOn3pkCw8DFQLoaMjfSMf1u69g/r/ivZ5K1Q82sP8X6ZvKzUf2ZhFxxACq3Xu8
next
end

In vpn Logs i can see that ipsec phase 1 failes with error : gateway validation failed

[Gem_Tfk]

I received the following answer from the Fortinet support:

Upon further analysis, we suspect that the issue might be due to your use of PSK for your VPN configuration and RADIUS being used for user authentication. It would appear that this combination is not supported for Android platforms at present. Kindly consider making use of the "X.509 certificate based authentication" instead of PSK.