VPN stuck at status 98% on windows 10 machine 2022

[rahulpatel]

Hi I have tried below on windows 10 but still I am unable to connect with FortiClient latest version and it get stuck at 98 percent.

• Uninstalled WAN miniport drivers
• Uninstalled FortiClient VPN software and reinstalled the latest version
  
  
• Turn off the windows firewall and tried
• Removed Forti network adapter

[Anonymous]

Hello Rahul,

Thank you for using the Community.

Can you please try the following steps: 

- Uninstall FortiClient using the removal tool (download it from support page). Restart the computer
- Run cmd as administrator : netsh int ip reset C:\resetlog.txt and restart the computer
- Run wan-miniport-repair-v2-x64.exe and restart computer
- Run wan-miniport-install-x64.exe
Install again FortiClient and try to connect.

Please let me know if this works for you :)

Best,
Irfan

[chango73]

Hello,

did you solved the issue?

Thank you

[parteeksharma]

Hi Rahulpatel,

VPN stuck at status 98% is most likely caused by a corrupted FortiClient installation and/or OS/adaptor problems on the PC. This can probably be solved by reinstalling the FortiClient software on the computer or you can try disabling the IPv6 adaptor on the PC and then check, if it works.

Regards,
Parteek

[tthrilok]

hi Rahul,

Could you please confirm if there are any changes made in the Forticlient, probably installing or upgrading the Forticlient before issue triggered?

+ Please share with us the Forticlient end logs.

+ It is better to disable the IPv6 protocol in the user machine on Forticlient tunnel NIC.

Thank you!

[vsahu]

Hello Rahul,

Can you take the debug on the FortiGate and test the connection, It will give us clarity on where it is failing 

 diagnose debug disable
diagnose debug reset
diagnose debug console timestamp enable
diagnose debug application sslvpn -1
diagnose debug application fnbamd -1
diagnose vpn ssl debug-filter src-addr4 x.x.x.x   <--- in place of x.x.x.x use Public IP address of the client's PC
diagnose debug enable 

[chango73]

Hello,

I have the following error on FCT debug

[2023-06-19 17:50:13.6102603] [528:12216] [sslvpndaemon 517 debug] FortiSslvpn: 12216: get_interface_metric() called, local index:11

[2023-06-19 17:50:13.6103393] [528:12216] [sslvpndaemon 517 debug] FortiSslvpn: 12216: metric: 55

[2023-06-19 17:50:13.6103471] [528:12216] [sslvpndaemon 517 debug] FortiSslvpn: 12216: CreateIpForwardEntry(dest=b56267c3 mask=ffffffff next=f865a8c0)

[2023-06-19 17:50:13.6103855] [528:12216] [sslvpndaemon 517 debug] FortiSslvpn: 12216: error IPv4SetRouteToFgt: CreateIpForwardEntry()=5010

[2023-06-19 17:50:13.6103988] [528:12216] [sslvpndaemon 517 debug] FortiSslvpn: 12216: [D]IPv4SetRouteToFgt(000001EEFE2F18FC, 000001EEFE2F1948)=-3

[2023-06-19 17:50:13.6154432] [528:12216] [sslvpndaemon 517 debug] FortiSslvpn: 12216: get_interface_metric() called, local index:11

[2023-06-19 17:50:13.6155309] [528:12216] [sslvpndaemon 517 debug] FortiSslvpn: 12216: metric: 55

[2023-06-19 17:50:13.6304367] [528:12216] [sslvpndaemon 517 debug] FortiSslvpn: 12216: SetIPv4RouteSRV: CreateIpForwardEntry(dest=f865a8c0 mask=ffffffff next=d965a8c0)

[2023-06-19 17:50:13.6304860] [528:12216] [sslvpndaemon 517 debug] FortiSslvpn: 12216: error SetIPv4RouteSRV: CreateIpForwardEntry()=5010