Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
LucasMo
New Contributor

Can't connect ipsec vpn

Hello,
I'm on a vm with a free license to test fortigate, but i have a problem, i can't connect to the ipsec vpn, i put the screenshot for the configuration so you can see what i do Capture d'écran 2024-03-12 154850.pngCapture d'écran 2024-03-12 154829.pngCapture d'écran 2024-03-12 154702.pngCapture d'écran 2024-03-12 154642.pngCapture d'écran 2024-03-12 154604.pngCapture d'écran 2024-03-12 154543.png

14 REPLIES 14
hbac
Staff
Staff
ezhupa
Staff
Staff

Can you also show the phase1 parameters on the FCT? 
The IKE debug would need to be run on the FGT while reproducing the issue:
diagnose vpn ike log-filter name <phase1_name>
diagnose debug application ike -1
diagnose debug console timestamp enable
diagnose debug enable

To disable:
diagnose debug disable
diag debug reset

LucasMo
New Contributor

Hello again, I changed to version 7.2.7 to have access to ssl vpn, but I still have the problem that when I try to connect, it loads and then tells me "vpn connection disconnected". And when i try to connect with the browser, it say that the ssl version is not compatible. LuteRender.pngCapture d'écran 2024-03-13 101346.pngCapture d'écran 2024-03-13 101411.pngCapture d'écran 2024-03-13 101429.pngCapture d'écran 2024-03-13 101459.pngCapture d'écran 2024-03-13 101514.pngCapture d'écran 2024-03-13 101535.png

LucasMo
New Contributor

Capture d'écran 2024-03-13 103549.pngerror.png

image_2024-03-13_104418333.png

Here is the error that I have

hbac

@LucasMo,

 

What happened to IPsec VPN? For the new issue, you can refer to https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-SSL-VPN-Debugs-Error-SSL-accept-fail...

 

Regards, 

LucasMo
New Contributor

I stop the ipsec vpn, my boss told me to go for the ssl vpn
but this article didn't help me...
Capture d'écran 2024-03-13 141939.png

hbac

@LucasMo,

 

Obviously, the commands didn't work. You got command parse error. Please make sure you are using the right command. 

 

Regards, 

LucasMo
New Contributor

I just didn't have the commandimage_2024-03-14_084900156.png

hbac

@LucasMo,

 

Which firmware version are you using? Can you provide the output of this command 'show full vpn ssl setting'

 

Regards, 

Labels
Top Kudoed Authors