Hello guys Currently we have a necessity of deploying a lot of IPSec
VPN's in different IP's from my WAN interfaceFor some reason that I
don't know the VPN's only works if i enable "ping" with secondary
addresses on Wan interface Currently I have 30 ...
Hello guys, Currently we have a necessity of deploying a lot of IPSec
VPN's in different IP's from my WAN interfaceFor some reason that I
don't know the VPN's only works if i enable "ping" with secondary
addresses on Wan interface Currently I have 31...
Hi Mahin, I opened a support ticket and they told me it is not possible
get a VPN without secondary addresses on interface.On the FortiOs 7.4 is
possible insert more than 200 IP's in secondary addresses. This solved
my problem
Hello I got some others informations I have other fortigate in 6.2.9
version, in this appliance, the ipsec works so good without "secondary
addresses".When ipsec try establish communication, and the ip that I
inform with "specify" and not "secondary ...
Hello Adrian, Thank you for help me WRSP1-FW-WZ1DC20C21-FG01 #
2023-01-11 13:29:52 id=65308 trace_id=635226 func=print_pkt_detail
line=5892 msg="vd-root:0 received a packet(proto=17,
170.231.15.66:500->200.195.149.26:500) tun_id=0.0.0.0 from local.
"...
Hello Adrian, This is the output from the other Fortigate: ike
0:VPN_MITRA01:MITRA_172.16.10.0/24: IPsec SA connect 32
170.231.15.66->200.195.149.26:0ike 0:VPN_MITRA01:MITRA_172.16.10.0/24:
using existing connectionike 0:VPN_MITRA01:MITRA_172.16.10.0...