vpn tunnel issue

[skd2011]

Hi Guys,

vpn tunnel is down since yesterday (fortinet 100D - 5.4.1)

Logs shows that it not going forward from phase1 (success)

Tried to reset it many times from monitor>ipsec but no luck

Please tell some quick fix or vpn tunnel reset commands for CLI.

Thanks,

Sandeep

[Toshi_Esumi]

What is the other end of the tunnel showing? Is that another FG? There may not be a quick fix but you might need to run application debugging for IKE "diag debug app ike -1" after specifying the the other end of IP if it's not a simple problem on the other end. Below cookbook has a collection of VPN troubleshooting methods.

http://cookbook.fortinet....c-vpn-troubleshooting/

[PMD]

Need more information to evaluate this.

As Toshi mentioned please provide the output of

diagnose debug app ike -1

diagnose debug ena