I have many VPN tunnels configured with the same settings
Some of them are down and some are up
The link monitor status is alive
The diagnose debug application ike -1 command shows a negotiation timeout in the phase 1
Does someone have an idea about the root cause?
Thanks for your help
Issue due to configuration mismatch between peers...
hi Stephane, iam experiencing a similar challenge are you able to share the parameters that were mimatched or steps taken to resolve
Negotiation timeout can happen for many reasons.
Did it ever work for those clients ? Or is the issue intermittent?
If Not,Are those peers same type devices ? What vendor/client?
I believe best next action is to take a packet capture. Definitely a packet capture can show you more information on what packets are sent and received.You can run also the debug " diagnose debug application ike -1"
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2023 Fortinet, Inc. All Rights Reserved.