Issue with VPN not binding correclty

[sc2111]

Hi,

All of a sudden I 've the vpn client that is not working anymore.

It does connect correctly to the remote sites, I tried several, but after that the vpn is not working in that the routes are not added. I also see that the virtual interface is not getting the IP I see in the vpn client application. Seems like it's unable to bind correctly

I Already tried to :

- update to latest version

- remove and reinstall

The vpn connection seems to be up correctly if I look at the client

But looking at the ipconfig the fortigate interface does not get the IP address

 

any help is appreciated

[ndumaj]

Hello,

Well double check the SSL VPN configuration:
https://docs.fortinet.com/document/fortigate/6.2.15/cookbook/371626/ssl-vpn

Also review the following articles:
https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Common-SSL-VPN/ta-p/191396
https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-SSL-VPN-Troubleshooting/ta-p/189542

BR

[Faiza_Emam_Delhi]

It seems like you are experiencing an issue with your Fortinet Firewall and VPN connection. Here are some troubleshooting steps you can try to resolve the problem:

1. Make sure you have the latest version of the VPN client software installed. If not, update it to the latest version.

2. Try removing the VPN client software from your system and then reinstalling it. This can help resolve any software-related issues.

3. Check if the virtual interface on the Fortinet Firewall is correctly configured and has the correct IP address assigned to it. If not, try assigning the correct IP address manually.

4. Verify that the routes are being added correctly after the VPN connection is established. Sometimes, incorrect routing settings can cause connectivity issues.

5. Check the firewall settings on your Fortinet device to ensure that the VPN traffic is allowed and not blocked.

[sc2111]

Already reinstalled latest vpn client. 

The problem is not with the firewall devices since I have the problem with all the customers I used to connect to. I have another computer, virtualized, that connects with no issue.

[Toshi_Esumi]

I would suspect something happened to the Windows machine, like pending Windows updates. Try rebooting the machine a couple of times. And if possible try connecting from another machine with the same credential. If that works, definitely something on the machine.

Toshi

[Christian_89]

If you're experiencing issues with your FortiGate VPN client not binding correctly, there are a few troubleshooting steps you can try:

1. Check VPN Configuration: Verify that the VPN configuration on your FortiGate firewall is correct. Ensure that the VPN settings, including authentication methods, encryption algorithms, and tunnel settings, match the configuration provided by the remote sites. Confirm that the configuration is consistent on both ends.

2. Restart VPN Services: Restart the VPN services on your FortiGate firewall. This can be done through the web interface or via the command-line interface (CLI). Restarting the services can help reset any temporary issues that might be causing the binding problem.

3. Verify IP Pool Settings: Check the IP pool settings for the VPN clients on your FortiGate firewall. Ensure that the IP address range assigned to the VPN clients does not overlap with any existing networks. Confirm that there are enough available IP addresses in the pool to accommodate the number of expected VPN clients.

4. Check Firewall Policies: Review the firewall policies on your FortiGate device. Ensure that there are no conflicting policies that could be blocking the VPN traffic or preventing the binding process. Verify that the necessary policies are in place to allow VPN traffic to and from the appropriate networks.

5. Monitor Logs: Monitor the logs on your FortiGate firewall for any relevant error messages or warnings related to the VPN connection. Look for any indications of why the binding process might be failing. The logs can provide valuable information to help diagnose the issue.

6. Enable Debugging: If the issue persists, you can enable debugging on the FortiGate firewall to gather more detailed information about the VPN connection process. This can be done through the CLI by enabling specific debug commands related to VPN, such as "diagnose debug enable" or "diagnose vpn ike log-filter dst-addr4 <client_IP>". Be cautious when enabling debugging as it can generate a large amount of logs and impact performance.

If the above steps do not resolve the issue, it is recommended to reach out to Fortinet support or consult with a network specialist who is familiar with FortiGate devices. They can further analyze the logs and provide specific guidance tailored to your network environment.

[sc2111]

Is not a problem with the firewall device, I can connect from another pc with the same credentials and settings.

[ndumaj]

Hello,

If it is impacting only one Windows machine then most probably should be a local machine issue. You can check FCT logs if there is any complain.
Also did you tried to connect via WebSSL mode?
BR

[pminarik]

I have usually seen this happen due to the IP to be assigned conflicting with another interface on the client PC. Consider checking other interface configs (including the disabled ones!), make sure none of them have IP/subnet overlap with the IP you're being assigned by SSL-VPN.