Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
broow
New Contributor

Site to Site tunnel inactive

through the CLI i disabled a tunnel for troubleshooting using the following commands.

config sys int edit Macon-Temp2 set status down next end   When finished i did the same but with "set status up".

 

nothing else was done, the tunnel still show inactive

2 REPLIES 2
Toshi_Esumi
SuperUser
SuperUser

If you don't have DPD enabled, there might needs to be some user traffic to bring up the tunnel.

mauromosc
New Contributor II

Hello, Broow,

 

You may try this command:

 

execute vpn ipsec tunnel up <phase2> <phase1> <serial>

 

If doesn't work, you can debug the ike application to troubleshoot the issue:

 

diagnose vpn ike log filter name <phase1-name>

diagnose debug application ike -1

diagnose debug enable

 

Regards,

Mauro.

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors