VPN IPSEC Dialup Connection IKE v2

[Albimatta]

Hello Guys,

I have two questions about the Ike V2 IPSEC DIalup Connection.

I want to configure in my enviroment (two fortigate 100F HA) like 150 dialup external connection. I have setup an IPSEC Tunnel (IkeV2) and set policy correctly.

I created the users locally (without any Proxy or RADIUS) and inserted in a group.

The VPN works fine but i have two questions:

- Is binding set in the IPSEC configuration the authusrgrp? because i haven't set and i won't set because if i set, every time thast the people connect appear when the people search a local ip for example, the Fortigate Auth page, and for us isn't necessary. So if i unset that is an error?

-  Ikev2 works fine with the local user (i enabled the EAP)? because i haven't any other type of authentication

Thank you so much

[Yurisk]

Well, in that case I would classify it as a bug and if you have Support active for this Fortigate, you could open a ticket with Fortinet TAC. As per configuration it should not be happening (provided you don't use User Groups in rules as well).