Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
AK_47
New Contributor

VPN to/from Azure

Hi guys,

 

I'm trying to setup VPN between Azure and on-premises FortiGate 50E following this cookbook but no luck.

https://cookbook.fortinet...pn-microsoft-azure-56/

The VPN connection is stuck on:

 

Action: negotiate

Status: negotiate_error

Reason: peer SA proposal not match local policy

 

Were there any changes since this article has been written?

 

Regards

 

 

2 REPLIES 2
AK_47
New Contributor

OK guys, I'm still stuck on establishing VPN connection between Azure and FortiGate 50E (v5.6.4).

Whatever combination of authentication and encryption algorithms I use nothing works. 

And the connection is stuck on phase 1. 

Assigned IPN/ACookies DirectioninboundLocal Port500Outgoing Interfacewan1Remote IP Remote Port500RoleresponderVPN TunnelN/AMessageprogress IPsec phase 1

 

Assigned IPN/ACookies Local Port500Outgoing Interfacewan1Remote IP Remote Port500VPN TunnelN/AMessageIPsec phase 1 error

 

I'll try to restart the router, but is there anything else worth to try? 

AK_47
New Contributor

Phase 1:

DH - 14, 2

AES256 / SHA1

3DES / SHA1

AES256 / SHA256

 

Phase 2:

AES256 / SHA1

3DES / SHA1

AES256 / SHA256

 

Hope that helps someone who needs it in the future.

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors