I already followed the official document to set ipsec phase1 and
firewall policy,the server side still can't enable.But on the client
side,fec enabled and working.System is fortigate 7.4.1 and licensed.this
is debug log: and this is my config: But on...
Solved,dial up mode server will generate other one tunnel.Like
name_0,name_1,etc.So need use "diagnose vpn tunnel fec name_0",not
"diagnose vpn tunnel fec name" to check logs.