fortigate cisco routerdd

[HM2]

I have Ipsec vpn between Cisco Router and Fortigate 100F

Ipsec phase 1and2 are up, I have subinterface on Fortigate firewall. I do ping fortigate firewall subinterface ip over ipsec tunnel but ping working after some times does not work what is problem? I can not di ping alla subinterface ip sometimes ping working after stop ping I dont see any error .policy router is normall

[msanjaypadma]

Hi @HM2 , 

Please refer to the article below to gather the logs. This will enable you to verify whether packets are being dropped

https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-IPsec-VPN-is-up-but-network-is-not-r...

[Toshi_Esumi]

What exactly do you mean by "subinterface"? Until we see your phase2 config related to the subinterface, we probably wouldn't even guess what the problem is.
Also not clear what you meant by "policy route(r) is normal." Are you using policy routes to steer some specific traffic to/from the tunnel?

Toshi