LT2TP/IPSec vpn does not work

Zilitonas · ‎12-17-2015

Hi,

I have problem with Fortigate 100D (5.2.4) and lt2tp/ipsec. If I connecting with the computer to a VPN and selected "Microsoft CHAP Version 2 (MS-CHAP v2)", then I get error. With "Unencrypted password (PAP) works perfectly. Why does not work with "Microsoft CHAP Version 2 (MS-CHAP v2)"?

ede_pfau · ‎12-17-2015

hi,

you may force the FGT to use MSCHAP by editing the config in the CLI:

config system interface
    edit <interface_name>
        set l2tp-client enable # should already be enabled
        config l2tp-client-settings
            set auth-type {auto | chap | mschapv1 | mschapv2 | pap}
        end
    end
end

The default is "auto" which may not work for your configuration.

Ede

"Kernel panic: Aiee, killing interrupt handler!"

View solution in original post

ede_pfau · ‎12-17-2015

hi,

you may force the FGT to use MSCHAP by editing the config in the CLI:

config system interface
    edit <interface_name>
        set l2tp-client enable # should already be enabled
        config l2tp-client-settings
            set auth-type {auto | chap | mschapv1 | mschapv2 | pap}
        end
    end
end

The default is "auto" which may not work for your configuration.

Ede

"Kernel panic: Aiee, killing interrupt handler!"

fjjaime · ‎05-13-2016

Hi,

Sorry to jump in this conversation, but, did you finally config L2TP/IPSec with mschapv2 vpn?

I have been digging and, in the same way than you, I only got it working with PAP.

Thanks in advance