Mikrotik IPsec VPN Tunnel problem, NO-PROPOSAL-CHOSEN/no matching, failed to pre-process ph2 packet

[amuammer]

Hello Community,

Dears, I have an issue in setup FortiGate MikroTik IPSec tunnel

from MikroTik side -> failed to pre-process ph2 packet

from FortiGate side -> NO-PROPOSAL-CHOSEN/no matching

Any help?

FortiGate

@IPSec 

[Anonymous · Accepted solution]

Hello

Seems you are not matching phase 2 encryption or integrity ciphers on both sides

Please croscheck with these guides

https://sleepytechbloke.wordpress.com/2022/01/31/ipsec-site-to-site-vpn-between-fortigate-and-mikrot...

[Anonymous]

Also this walkthrough

https://sleepytechbloke.wordpress.com/2022/01/31/ipsec-site-to-site-vpn-between-fortigate-and-mikrot...

[amuammer]

@Anonymous 

Thank you,

you saved my day,

actually, i had other problems related to remote IP, and key lifetime not being matched

[Anonymous]

Hi @amuammer

Great we could help and thanks for contributing in our community