Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Kebab
New Contributor

VPN IPSEC FORTIGATE F60E Bintec

Hello, I have a problem with my VPN ipsec between a Fortigate F60E and a Bintec RS353A. The link is up but I can not ping and go to the remote network. The rules are good, the static route too. I do not understand. Can you help me. 

 

Log:

# ike shrank heap by 126976 bytes ike 0:STEP: link is idle 1064 FORTIGATE IP->BINTEC IP:0 dpd=1 seqno=41889 ike 0:STEP:9: send IKEv2 DPD probe ike 0:STEP:13: sending NOTIFY msg ike 0:STEP:9:13: send informational ike 0:STEP:9: enc 0706050403020107 ike 0:STEP:9: out 61E99DF75E401493BF21B4FB4E3F4D7E2E202508000000030000003C000000207D3BAB84A3F20FB68B638ADEAA9E519A16D51BDF5F27BCEAEB2FC94A ike 0:STEP:9: sent IKE msg (INFORMATIONAL): FORTIGATE IP:500->BINTEC IP:500, len=60, id=61e99df75e401493/bf21b4fb4e3f4d7e:00000003 ike 0: comes BINTEC IP:500->FORTIGATE IP:500,ifindex=1064.... ike 0: IKEv2 exchange=INFORMATIONAL_RESPONSE id=61e99df75e401493/bf21b4fb4e3f4d7e:00000003 len=60 ike 0: in 61E99DF75E401493BF21B4FB4E3F4D7E2E202520000000030000003C000000207B42A462D284D4D0544C3F7E25C58B52003787FDCD92470460C21C62 ike 0:STEP:9: dec 61E99DF75E401493BF21B4FB4E3F4D7E2E202520000000030000002000000004 ike 0:STEP:9: received informational response ike 0:STEP:13: received NOTIFY acknowledgement ike 0:STEP:9:13: processing informational acknowledgement ike 0:STEP: link is idle 1064 FORTIGATE IP->BINTEC IP:0 dpd=1 seqno=4188a ike 0:STEP:9: send IKEv2 DPD probe ike 0:STEP:19: sending NOTIFY msg ike 0:STEP:9:19: send informational ike 0:STEP:9: enc 0706050403020107 ike 0:STEP:9: out 61E99DF75E401493BF21B4FB4E3F4D7E2E202508000000040000003C00000020A014E19214F55CC8B3267DBB00D9069E811491022B00BD7C52D82011 ike 0:STEP:9: sent IKE msg (INFORMATIONAL): FORTIGATE IP:500->BINTEC IP:500, len=60, id=61e99df75e401493/bf21b4fb4e3f4d7e:00000004 ike 0: comes BINTEC IP:500->FORTIGATE IP:500,ifindex=1064.... ike 0: IKEv2 exchange=INFORMATIONAL_RESPONSE id=61e99df75e401493/bf21b4fb4e3f4d7e:00000004 len=60 ike 0: in 61E99DF75E401493BF21B4FB4E3F4D7E2E202520000000040000003C00000020BE3B35C2686ACD5815B90BB83F1936E0B6ED6D83764D01329C4F22FB ike 0:STEP:9: dec 61E99DF75E401493BF21B4FB4E3F4D7E2E202520000000040000002000000004 ike 0:STEP:9: received informational response ike 0:STEP:19: received NOTIFY acknowledgement ike 0:STEP:9:19: processing informational acknowledgement ike change cfg 1 interface 0 router 0 certs 0 ike config update start ike config update done ike 0: cache rebuild done ike 0:STEP: link is idle 1064 FORTIGATE IP->BINTEC IP:0 dpd=1 seqno=4188b ike 0:STEP:9: send IKEv2 DPD probe ike 0:STEP:25: sending NOTIFY msg ike 0:STEP:9:25: send informational ike 0:STEP:9: enc 0706050403020107 ike 0:STEP:9: out 61E99DF75E401493BF21B4FB4E3F4D7E2E202508000000050000003C000000204BEB1BF3543FC0BAEA392889F890A6EEE453E41A2BF968D5706C03E3 ike 0:STEP:9: sent IKE msg (INFORMATIONAL): FORTIGATE IP:500->BINTEC IP:500, len=60, id=61e99df75e401493/bf21b4fb4e3f4d7e:00000005 ike 0: comes BINTEC IP:500->FORTIGATE IP:500,ifindex=1064.... ike 0: IKEv2 exchange=INFORMATIONAL_RESPONSE id=61e99df75e401493/bf21b4fb4e3f4d7e:00000005 len=60 ike 0: in 61E99DF75E401493BF21B4FB4E3F4D7E2E202520000000050000003C00000020E79CB763E5CBF7FBF606DD1CE2F1931EAD249C38A60836F0A12D70B9 ike 0:STEP:9: dec 61E99DF75E401493BF21B4FB4E3F4D7E2E202520000000050000002000000004 ike 0:STEP:9: received informational response ike 0:STEP:25: received NOTIFY acknowledgement ike 0:STEP:9:25: processing informational acknowledgement ike 0:STEP: link is idle 1064 FORTIGATE IP->BINTEC IP:0 dpd=1 seqno=4188c ike 0:STEP:9: send IKEv2 DPD probe ike 0:STEP:33: sending NOTIFY msg ike 0:STEP:9:33: send informational ike 0:STEP:9: enc 0706050403020107 ike 0:STEP:9: out 61E99DF75E401493BF21B4FB4E3F4D7E2E202508000000060000003C000000207D86D49E0945170829220901398139DD69B26B1F4E88C47A5C40170A ike 0:STEP:9: sent IKE msg (INFORMATIONAL): FORTIGATE IP:500->BINTEC IP:500, len=60, id=61e99df75e401493/bf21b4fb4e3f4d7e:00000006 ike 0: comes BINTEC IP:500->FORTIGATE IP:500,ifindex=1064.... ike 0: IKEv2 exchange=INFORMATIONAL_RESPONSE id=61e99df75e401493/bf21b4fb4e3f4d7e:00000006 len=60

Many thanks.

0 REPLIES 0
Labels
Top Kudoed Authors