VPN IPsec dialup peertype - how to use

[Yurisk]

Good day everyone,

I am trying to understand how and what for to use peertype dialup settings in Phase1 interface mode for IPSec VPN client connections. The documentation just lists this option, Google tells contradicting stories. I tried just for luck using Firewall group with local users  (setting via set usrgrp) - could not connect with any of them (Authentication failed), while using the same user group but peertype any works fine. 

That is what I mean:

(phase1-interface) # edit FCtun0

(FCtun0) # set peertype any Accept any peer ID. one Accept this peer ID. dialup Accept peer ID in dialup group.

Thanks.

[citromkolbasz]

Have you found anything about this option in the official forti documentation? Or do you know the answer now?

[sw2090]

peertype any will accept any peer id you submit upon dialling in. It will even accept an empty peer id.

one peerid will only accept this one specific peer id upon dialling in. You will only be able to dial in if you submit the correct peer id.

dialup probably allows you to enter some grup and put peers in there to have more then one bt not any :)

[sw2090]

peertype any will accept any peer id you submit upon dialling in. It will even accept an empty peer id.

one peerid will only accept this one specific peer id upon dialling in. You will only be able to dial in if you submit the correct peer id.

dialup probably allows you to enter some grup and put peers in there to have more then one bt not any :)