Site-to-site IPsec VPN with two FortiGates

[TJNIHAL]

Hi, I have 2 Fortinet device 60E and 60D. I have been trying to create a VPN tunnel between the device.

I followed this cookbook article https://cookbook.fortinet.com/site-site-ipsec-vpn-two-fortigates-56/ and both my devices are behind the NAT So, I had to change the NAT setting beside I followed every single step mentioned in this article. 

In the end tunnel is NOT UP so, I tried to converted the tunnel to custom and disabled NAT-T, then tunnel is UP but traffic is not passing.

Not sure where to look for issue. Any guidance highly appreciate. Both devices have v5.6.2 build1486 (GA) firmware.   Thanks.

[TJNIHAL]

Sorry I have posted in the wrong form. I have created a new post in VPN.. Not sure how to delete this post.

[TJNIHAL]

Sorry, I created the post in wrong form. I have created new Post in VPN form. Use this link https://forum.fortinet.co...m=172678&tree=true PS: No option to delete this post.

[amseamans]

Are there any errors in the logs for the tunnel?  Phase 1 and Phase 2 are good?  Set up routes and policies to allow traffic? 

[sangomab · Accepted solution]

Hi there,

try this,

diagnose debug disable diagnose debug reset diagnose vpn ike gateway clear diagnose vpn ike log filter name YOUR_VPN_NAME diagnose debug application ike -1 diagnose debug enable

and send back the logs

di de di to disable diagnose