LT2TP/IPSec vpn does not work

[Zilitonas]

Hi,

I have problem with Fortigate 100D (5.2.4) and lt2tp/ipsec. If  I connecting with the computer to a VPN and selected "Microsoft CHAP Version 2 (MS-CHAP v2)", then I get error. With "Unencrypted password (PAP) works perfectly. Why does not work with "Microsoft CHAP Version 2 (MS-CHAP v2)"?

[ede_pfau · Accepted solution]

hi,

you may force the FGT to use MSCHAP by editing the config in the CLI:

config system interface
    edit <interface_name>
        set l2tp-client enable # should already be enabled
        config l2tp-client-settings
            set auth-type {auto | chap | mschapv1 | mschapv2 | pap}
        end
    end
end

The default is "auto" which may not work for your configuration.

[fjjaime]

Hi, 

Sorry to jump in this conversation, but, did you finally config L2TP/IPSec with mschapv2 vpn?

I have been digging and, in the same way than you, I only got it working with PAP.

Thanks in advance